Post
Topic
Board Hardware wallets
Merits 1 from 1 user
Re: OneKey Hardware Wallet HACKED!
by
Meuserna
on 22/04/2025, 05:43:44 UTC
⭐ Merited by JayJuanGee (1)
This is yet another example of why I'm not a fan of saving a seed on a hardware wallet.  Every secure element will eventually get hacked, meaning you'll need to upgrade again and again.

There's a better way.

With a device like Krux or SeedSigner, you can save your seed on a QR code that you scan in order to load your seed.  There's no need for a secure element chip or even a PIN code to unlock the device since there's nothing saved on the device.  Plus, it's fully airgapped.

And with Krux, you can save your seed as an encrypted QR.  If somebody finds your encrypted QR, they can't scan it without the decryption key.

If somebody steals your device?  No worries.  There's nothing on it.  And if you use an encrypted QR, no worries if somebody finds it.  They can't scan it without the decryption key.

Best of all, the encryption is open source.  It's industry standard CBC encryption with as strong of a decryption key as you choose.  You can even save your decryption key as a QR.

Companies that make hardware wallets are never going to use the Krux/SeedSigner way of loading seeds via QR because they make money through hardware sales and upgrades.  "Oh, no!  Last year's secure element chips have been hacked!  Better upgrade to the latest model!"  It's ridiculous, but I don't blame them.  It's a business model that works.  I don't have to worry about any of that though.  I never save my seed on a device.

Pro Tip!  There's a fork for SeedSigner that enables encrypted QRs too.