Post
Topic
Board Hardware wallets
Re: Ledger Keycard bypass
by
Pmalek
on 19/07/2022, 09:50:36 UTC
Old hardware wallets should not hold any seed words in them, and safest thing would be to smash them with hammer and recycle.
You are forgetting the most important part. Two things need to happen for this vulnerability to be exploited. The attacker needs physical access to the hardware wallet and that is something that you shouldn't allow at any circumstances. And the attacker needs to know exactly how to execute his attack. Even if someone knew how to get to mocacinno's HW.1, they most probably wouldn't know what to do with it unless he is targeted for that purpose exactly. There isn't a public tutorial about the attack (hopefully) or a software you fire up, click the 'hack it' button and the seed appears on screen.

No matter what hardware wallet you have and what security measures you have taken to protect its private keys (passphrase, multi-sig, SD cards, etc.), you should look to move your funds from it if someone stole it from you. That applies to Trezors, Ledgers, and the other bunch.