Post
Topic
Board Hardware wallets
Re: Foundation Passport Official Thread
by
Lucius
on 05/02/2025, 12:04:49 UTC
I don't think this vulnerability is that big of an issue and here is why. Your wallet won't be vulnerable to remote manipulation and hacking. For someone to retrieve your data, they would need physical access to the device. They will have to take it apart and perform Double Laser Fault Injections on the chip. That requires a lab, equipment, and knowledge. You are unlikely to be the victim of a robbery where robber Joe will know what to do with the chip once he has it.

Some would disagree with that, but perhaps the bigger problem is that no one (as far as I know) has asked that question in this thread - and for some reason the OP doesn't provide answers to very specific questions. It is generally claimed that all chips are vulnerable to certain types of attacks, but I guess it would be fair to admit that some are more vulnerable than others.

Anyone storing tens or hundreds of BTC using FP should know that there is a serious vulnerability in the chip that is apparently found in an unspecified number of manufactured devices.

Unless Foundation got in contact with customers who bought the old ones and replaced those devices, then yes, there is a group of users using Passports containing the 608A chip.

We know that won't happen, if for no other reason than that the device was produced in a limited number of units and is no longer being produced. Be that as it may, this problem affects a very small number of people who bought the device - and the lesson of the whole story is that you should not only pay special attention to backup storage, but also the hardware wallet, considering that it is obviously possible (albeit with very sophisticated methods) to extract private keys from most (or all) hardware wallets.