I help normies learn more about the world of Bitcoin and Cryptocurrencies so they can take control of their finances and build true wealth. 🚀💰💵 #Bitcoin
Lisbon, Portugal
Joined October 2016
- Tweets508
- Following208
- Followers296
- Likes1.3K
THIS is exactly the reason Bitcoin is not being adopted by anyone. This needs to change.
시드사이너랑 크럭스 멀티벤더로 멀티시그 구성하신 분들은 조심하세요.
멀티벤더, 멀티시그를 하는 이유는 한 기기가 뚫려도 비트코인을 지키기 위해서입니다. 그래서 보통은 서로 다른 제조사의 지갑을 섞어서 구성하곤 합니다.
실제로 많은 분들이 제조사 리스크를 피하기 위해 SeedSigner와 Krux로 멀티시그 지갑을 구성하시는데, 이 조합은 완벽한 분산이 아닙니다.
왜일까요?
겉모습도 개발 팀도 다르지만, 깃허브를 확인해보면 둘 다 embit이라는 동일한 비트코인 라이브러리를 기반으로 작동하고 있습니다.
만약 embit에 치명적인 버그가 발생하면 두 기기가 동시에 동일한 오류를 일으킬 수 있습니다. 결과적으로 2-of-3 멀티시그에서 두 키가 같은 이유로 무너지면 멀티시그의 의미가 사라지게 됩니다.
멀티시그의 핵심은 단순히 서로 다른 '기기(하드웨어)'를 쓰는 것이 아니라, 서로 다른 '소프트웨어 구조'를 조합하는 것입니다. 멀티시그를 구성할 때는 제조사뿐만 아니라 내부 라이브러리 의존성까지 확인해 보는 습관이 필요합니다.
최근 BOSS Summit에서 Krux 개발자를 직접 만나 나누었던 이야기입니다. 비트코인 센터 서울@BtcCtrSeoul 에서 크럭스를 판매하고 있다니까 깜짝 놀라했습니다.
크럭스와 시드사이너를 섞어 멀티벤더를 구성하는 비트코이너들이 많으니 "이 위험성을 한국에 꼭 좀 전해달라"고 당부했습니다.
비트코인 커뮤니티의 안전을 위해 선뜻 이 위험성을 공유해 준 개발자분께 감사드리며, 저 역시 더 많은 분들과 공유하고자 이 글을 작성합니다.
44
The OneKey Pro 2 looks more like a phone than a hardware wallet, and a few of the things it can do surprised me. I set up the Pro 2 from scratch, restored a wallet, and sent bitcoin with it on camera, so you can see exactly how it works.
I’m giving it a strong thumbs up 👍🏻, but two missing pieces still decide whether it earns a spot next to the hardware wallets I recommend most. Stick around to the end to find out where it lands.
Watch on Youtube: youtu.be/NfGED7QL8bQ
1
5
211
I hate to say this but I am disappointed with @Blockstream's handliing of the Liquid Network drain. Communications have been sparce and inconsistent. There still is no Peg-out service available and the Liquid network is still sitting at 86% backing. So 14% of every holder's assets are gone. I feel for the people who went all-in on the Liquid Network and Blockstream.
I have long been a proponent of Blockstream and their products but my faith is starting to wane. @Blockstream, it's not too late. Please increase the frequency and tranparency of updates. If all Liquid holders are going to need to eat 14% of their bags, tell us. Left to wonder, people will fill the void with anything and everything. Throw us a bone. Please.
9
170
Your Complete High-Value Bitcoin Security Plan:
If you hold a serious amount of Bitcoin, you already know a single wallet isn't the answer. What almost nothing out there gives you is the complete picture: what to build instead, where every piece goes, and how it all holds up on the very worst day.
youtu.be/mv07e2vdAL8
This is your full self-custody plan, end to end. It's built for a stolen phone, a house fire, a wrench, a frozen exchange, and the day your family has to recover everything without you. And it's built to defeat an enemy most setups feed without knowing it.
3
153
Hey everybody! I built an op_return tool to help people figure out this neat function of Bitcoin. It's free and opensource here: seqrets.github.io/op_return/
Feedback welcome.
1
105
A wallet developer (@overtorment) spent a week auditing 494 crypto wallet apps on the Apple App Store and published the results. 45 of them can cost you everything, and they range from obvious junk to a name you might be using right now.
I walk through how the audit worked, what the flagged apps actually do, and the one setup that would have protected users from all 45.
Watch on Youtube: youtu.be/CIOlWw8GC44
Full research report: kek.lol/research/appstore-wa…
Just signed up for a brand new account with Castle. Super easy and smooth. Impressed so far! My first Bitcoin bank account! 💥
Join the financial revolution happening on @savewithcastle!
- Cash - up to 3.5%
- High Yield - up to 12%
- Bitcoin - the best there is
Sign up using my link and get $10 (personal) or $100 (business) - savewithcastle.com/ref=twrwz…
3
140
After the ColdCard incident, the question filling my comments changed from "which hardware wallet" to "single-sig or multisig?" Two groups of ColdCard users came through that attack completely untouched. One of them used the exact setup I'm about to tell newcomers to wait on. That should sound backwards.
Watch here: youtu.be/vDYiX1mguKs
I don't think people understand how big a deal this is. Bitcoin was not hacked but the entire Liquid Network was drained in a single transaction. I have been a big fan of the LN but have always mentioned that you are trusting a 3rd party with your BTC. If you've lost your L-BTC in this incident, I'm with you. I'm sick to my stomach. This shouldn't happen to a company like Blockstream. Hopefully, the funds will be returned. 🤞🏻
LIQUID NETWORK DASHBOARD CONFIRMS 4000 BTC DRAIN
@btcinsider__ reports hackers appear to have tricked Liquid’s functionaries into approving a transaction that looked valid to their systems but authorized a peg-out of roughly 3,998 BTC to the Bitcoin network.
In other words, the hackers created a transaction that passed Liquid’s checks, causing the functionaries’ security hardware to sign off on the withdrawal.
The hackers claim to be whitehats.
3
450
My seed phrase is on the screen in this video. Anyone watching can read it, copy it, and load it into their own wallet. There is bitcoin behind it and it is still sitting there.
Three wallets came out of that one seed. The first one was emptied before my transaction even confirmed. The second one is yours if you can work out the passphrase, and it is not a hard one if you watch this channel. The third one nobody is getting.
Wallet 2: bc1q4vmnmvmrde389ase9qadzph6v23e6s20y8n4mu(cost basis: $9.77, STCG))
Wallet 3: bc1qnulcxn4zchjvykpvtrzde3ecy80vk7mf4jkfd4
Watch them live. If any of them moves, the blockchain will timestamp it for everyone.
*To be clear about wallet 2: those sats are mine and I am inviting you to take them. I am not encouraging anyone to break into somebody else's wallet. That is theft and it is illegal.
I am unable to connect to my @Blockstream wallet on mobile and desktop. Anybody experiencing the same thing? Hope the funds are SAFU!
2
1
230
Sovereign Money retweeted
JUST IN: The first post-quantum resistant Bitcoin transaction was mined today.
"It required no soft forks. It required no hard forks. It required no core protocol upgrades. And it's live today."
Is an air-gapped iPhone really secure? After my air-gapped iPhone video, the comments filled up with one objection, backed by an Edward Snowden quote about phones never really being off. I took the two strongest comments and put them under a microscope, and one of them led somewhere I didn't expect.
youtu.be/7or3embFELE
1
315
Sovereign Money retweeted
¿Sabías qué?
@muun wallet tiene uno de los esquemas de seguridad y recuperación más particulares entre las wallets Bitcoin populares.
A diferencia de la mayoría, Muun wallet:
• Usa un esquema multisig 2-de-2.
• No te entrega la típica seed phrase BIP39 de 12/24 palabras.
• Una clave está en tu dispositivo y Muun participa con la otra en el uso cotidiano.
• Para una recuperación soberana utiliza un Recovery Code + Emergency Kit, que contiene cifrada la información necesaria para recuperar tus fondos independientemente de Muun.
Esto último es importante: aunque Muun participe en el 2-de-2 cotidiano, no significa que dependas de Muun para recuperar tus BTC.
Una comparación interesante es Blockstream Green wallet:
• También ofrece un esquema Bitcoin 2-de-2 con una segunda clave en sus servidores.
• Pero sí utiliza una seed BIP39 de 12/24 palabras.
• Además, incorpora un timelock CSV que permite que los fondos puedan gastarse únicamente con la clave del usuario una vez transcurrido el período establecido.
¿Es @Muun más segura por no usar (BIP39) seed phrase?
No necesariamente.
Pero su enfoque es bastante diferente: en lugar de intentar representar toda la recuperación mediante 12/24 palabras, utiliza un Emergency Kit que incluye las claves y los output descriptors necesarios para localizar y recuperar los fondos.
Y eso es técnicamente mucho más interesante que simplemente decir: “Muun no usa seed”.
I Built @zachxbt 's iPhone Bitcoin Wallet. It Cost $0.
Youtube Link: youtu.be/kEYmwkq08HI
3
230
I have been saying this exact thing for a long time. Finally, someone agrees!
When we were testing hardware wallets during the early @AnchorWatch days, there wasn't one that didn't concern me in some way.
Bitbox touch was finicky and freaked me out. Ledger had to go through 19 painful software updates before I knew that it would eventually work. COLDCARD bricked when I used the wrong USB cord, and I knew customers would do the same. Jade at one point just refused to work and it required backchannelling the devs to fix. Keystone didn't display my UTXO so I thought the bitcoin I'd put on it was gone.
From that point on, I learned that a hardware wallet is truly JUST A SIGNING DEVICE. It's not a wallet.
That has been lost in the conversation recently.
On single sig, the steel plate is your bitcoin key, and the hardware is just how you sign. You should never RELY on the device for storing your seed, in my opinion. Steel backups are your bitcoin.
Multi-vendor multisig reduces the risk of hardware failure (and entropy failure). Miniscript enabled multi-vendor multisig further removes those risks and many more.
Check us out to see how we protect you from this and so many ways that people lose their bitcoin. Wallet failure, human error, natural disasters, social engineering and phising, internal crime, vendor collusion, accidental loss, violent coercion, hacking and death. Our customers stay safe and their companies and families retain their bitcoin regardless of what comes their way.
And we're the best priced option on the market for the level of service and security we offer.
1
164