Security Anti-klepto explained: how the BitBox02 protects you against leaking private keys The BitBox02 is the first hardware wallet that offers protection against the nonce covert channel attack, by supporting a protocol called anti-klepto.
Security Remote multisig theft attack on the Coldcard hardware wallet tl;dr: When registering a multisig wallet in a Coldcard, the Coldcard did not verify that it is actually part of the multisig wallet. This allowed a malicious computer wallet
Security Coldcard isolation bypass Responsible disclosure of a Coldcard vulnerability that allows an attacker to spend your bitcoins when you think you are signing a testnet transaction.
Security How nearly all personal hardware wallet multisig setups are insecure If you use hardware wallets in a Bitcoin multisig setup, using a single computer to handle them, you are likely to be exposed to remote theft or ransom attacks.
Security A ransom attack on Trezor's and KeepKey's passphrase handling Responsible disclodure of a remote ransom attack on Trezor hardware wallets where users are vulnerable when entering the passphrase on the computer.
Hardware Best of both worlds: using a secure chip with open source firmware Learn how our unique security architecture does not compromise on transparency or security.
Release BitBox app & firmware update 6.2020 Update with an important security patch, as well as many new features. We recommend that you update beforeyou next use your BitBox02.
Security The pitfalls of multisig when using hardware wallets Bitcoin multisignature wallets are not the silver bullet for security that many claim they are. Not yet.
Security How we do security assessments We disclose how we rate security vulnerabilites to foster an open discussion towards a more coordinated industry approach.
Security Using the Steelwallet to further improve seed backup safety A simple yet highly attack-resistant way to backup the recovery words of your hardware wallet.
Security Theft attack on Trezor Model T Responsible disclosure of a vulnerability affecting Trezor Model T multisig wallets that allow theft of all funds of an account.
