Search content
Sort by

Showing 20 of 382 results by tenant48
Post
Topic
Board Hardware wallets
Re: New HW wallet announced: COLDCARD Q1
by
tenant48
on 15/07/2025, 11:18:34 UTC
Coldcard Q users - are you able to set up different wallets on the same device?  Meaning, can I set BTC aside for different purposes using the same hard- wallet?  Doesn’t have to have separate paraphrases

Yes, you can use different Bitcoin accounts by changing the account number in the derivation paths.
https://coldcard.com/docs/paths/
Post
Topic
Board Hardware wallets
Re: Why haven't any other Hardware Wallet added seed-xor support?
by
tenant48
on 16/06/2025, 07:16:20 UTC
The essence of XOR is changing the value of a bit to the opposite. Having two Seeds, we lay them out bit by bit, then change the value of the bits to the opposite in the first Seed only in those places where in the corresponding places of the second Seed there will be a unit.
The only thing is, you will need to recalculate a new checksum for the 12th or 24th last word.
Example: you have two 12-word (132-bit) Seeds, you invert the corresponding first 128 bits, and recalculate the remaining 4 bits of the checksum for the new resulting Seed.
This way you don't have to worry that any online tool will stop working or will work incorrectly, in extreme cases you can restore everything yourself with a piece of paper and a pencil.

Now why are developers of other wallets not rushing to add this function? Adding such a function will require additional memory, which is already not large in modern hardware wallets. The same Trezor created its own SLIP39 standard, but I don't know of any third-party wallet except Keystone that would add this standard. The reason is simple - they don't want to clutter up the memory of their wallets with functions that are not of primary importance.
Post
Topic
Board Hardware wallets
Merits 2 from 1 user
Re: Trezor Safe 3 Vulnerable to Physical Attacks?!
by
tenant48
on 13/03/2025, 11:59:01 UTC
⭐ Merited by hugeblack (2)
so, reformatting the device and updating the software/firmware should prevent such a supply chain attack.
I think Ledger's Donjon security team is trying to prove itself rather than a serious security vulnerability.

As far as I understand, this is not entirely true.
The Trezor article says the following:

Quote

Ledger Donjon researchers didn’t extract a private key or PIN from the tested device.

However, they demonstrated a way to bypass the authenticity check, and the firmware hash check in Trezor Safe 3 using advanced tools and a high level of hardware expertise.

……….

Users who purchase from official sources remain fully secure.

That is, only those users who made a purchase from official sources are safe.

 
Post
Topic
Board Hardware wallets
Re: Fake Ledger Nano X Passes Genuine Check and Leads to Loss of Over $200,000
by
tenant48
on 17/01/2025, 14:24:26 UTC
Found two other interesting comments under this article on Reddit:

Quote
KiwiCommercial1522

If it makes you feel any better, I have a legit Ledger FROM the exact website and this exact thing happened to. me. My entire account was drained of over 300k in funds overnight. My friend also had 170k stolen from him over the summer, exact same thing. NO ONE had access to these seed phrases, the hard wallets were not connected to the computer, no smart contracts were signed. It is possible your Ledger was compromised from the beginning but this seems to be a wide spread issue with Ledger that they are covering up. There is a full class action lawsuit right now against Ledger about security issues but . I PM'd you, feel free to contact me if you'd like.
What could it be? Another real Ledger hacking story or an attempt by a scammer to foist a victim on expensive legal help that is unlikely to help him?


I also found this message:
Quote
WellPro13

4 days ago
I'm done with Ledger. 2 days ago, my BTC was stolen. No leaked phrases. No Clicked links. No fake devices. Nobody had access to the wallet in ANY sense. smh...

In general, in our time, when there is a huge number of scammers, it has become difficult to determine the truth from a lie.
Post
Topic
Board Hardware wallets
Re: Fake Ledger Nano X Passes Genuine Check and Leads to Loss of Over $200,000
by
tenant48
on 14/01/2025, 14:37:12 UTC
I missed this part about him downloading the software from the App Store. Does he say that he searched for the wallet on the App Store manually or that the official Ledger website directed him there?  

I read this in the comments to his post:
Wim1441 asks the author:
Quote
From which website did you download ledger live? Maybe they had a scam website shown on the packaging or in the manual.
Programmierus answers him:
Quote
Not possible. Ledger Live from App Store on Mac.
Post
Topic
Board Hardware wallets
Merits 11 from 4 users
Re: Fake Ledger Nano X Passes Genuine Check and Leads to Loss of Over $200,000
by
tenant48
on 14/01/2025, 10:31:24 UTC
⭐ Merited by The Sceptical Chymist (5) ,FinneysTrueVision (3) ,Pmalek (2) ,m2017 (1)
Very strange story. The author claims that he downloaded Ledger Live from the App Store and the wallet passed the authenticity check normally. So the problem is unlikely to be in the wallet itself 

The following things also confuse me:
According to the author, the victim was new to cryptocurrency, but transferred an impressive amount of more than $200,000 to the wallet.

The provided screenshot shows that the wallet has been verified and not a single application is installed, although ETH and TRX must be installed at a minimum. That is, they took a screenshot even before the hack, which is very strange, because according to the author, after the hack the wallet was no longer touched and nothing was installed or deleted.

Of course, you can check your wallet by resetting it to factory settings, create a new SEED, put a not very large amount on it and see if it gets stolen. But, in my opinion, they are not telling you something, or it's a trivial leak of SEED by an inexperienced user.
Post
Topic
Board Hardware wallets
Re: Using Two Trezor Devices on one Trezor Suite anyone do this?
by
tenant48
on 14/01/2025, 07:45:18 UTC
If you have the task of keeping the balance for the first wallet in the Suite desktop application, then use the web version of Trezor Suite on the same computer for the second wallet, which will pull up the balance of this wallet each time you connect again.
Post
Topic
Board Hardware wallets
Re: Whats the point of the 20 words seed phrase
by
tenant48
on 24/12/2024, 18:52:35 UTC


I took a brief look at the documentation about Shamir Backup of Keystone. The documentation merely describes what it is and how to set it up, but I couldn't figure out e.g. if it is compatible with the shards that new Trezor Safe devices create (I doubt it). As mentioned my main concern is interoperability.

Shamir Backup (SLIP39) is a standard created by Satoshilab's, shards created in Trezor wallets will be compatible with Keystone wallets.
https://blog.keyst.one/why-keystone-implemented-shamir-backups-71e319f972a6

You can also create shards using the converter.
Post
Topic
Board Hardware wallets
Re: Whats the point of the 20 words seed phrase
by
tenant48
on 24/12/2024, 07:21:45 UTC
none of those shards reveal any information about what they encode.

Each shard contains information about share groups and the group threshold.
https://bitcointalk.org/index.php?topic=5515901.msg64685551#msg64685551


There are reasons to evolve BIP39 recovery words and somebody has to make the first steps. My only problem with Trezor's new approach is that they are at present likely the only ones who support it. I don't know if other wallets will follow up and thus interoperability is hampered or rather cut off.

Keystone also supports Shamir backup.
https://guide.keyst.one/docs/shamir-backup
Post
Topic
Board Hardware wallets
Merits 2 from 1 user
Re: SecuX Forte USB: AES-256-bit encrypted pen drive, has anyone heard of it?
by
tenant48
on 01/12/2024, 07:44:34 UTC
⭐ Merited by Pmalek (2)
I did not find in their description what type of memory they use. Usually, if the manufacturer does not indicate this, then they use the cheapest type of QLC, in which case for the money they are asking for, it does not make sense, since it has nothing to do with the reliability of data storage. If they used SLC or at least MLC memory type, then buying this device would make some sense.
Post
Topic
Board Hardware wallets
Re: Black Friday Hardware Wallet Less Known Deals
by
tenant48
on 26/11/2024, 16:40:21 UTC
There are also discounts on ColdCard wallets for Black Friday.

ColdCard MK4 - $126.35
ColdCard Q - $175.99
Post
Topic
Board Трейдеры
Re: Kucoin открывает торги
by
tenant48
on 19/11/2024, 09:09:13 UTC
Всем добрый день.
Вчера 18 ноября KuCoin заблокировал мне вывод средств в размере примерно 3000$
Интересно,что 17 ноября я продал монет на более чем 5000$ и все без проблем вывел на свой кошелек. На следующий день решил продать еще монет на сумму около 3000$ и мой аккаунт заблокировали.
Я обратился в службу поддержки и мне предложили:
1. Указать источник проданных монет.
2. Повторно пройти верификацию.
3. С какой целью я продал монеты.
Я указал им источник монет, повторно прошел верификацию, и сказал, что продал монеты, так как их стоимость выросла и я позже собираюсь откупить их опять по более низкой цене(хотя считаю что этот вопрос, заданный с их стороны звучит глупо).
Вообщем сейчас ожидаю от них ответа, но почитав подобные ситуации на Reddit, вижу что многие столкнулись с подобной проблемой и их вопросы не решаются неделями.
Подозреваю, что под видом задавание различных вопросов со стороны биржи на которые трудно или не возможно ответить идет попытка «отжатия» средств у пользователей. О дальнейшем ходе событий и как разрешилась ситуация напишу позже. А пока предупреждаю остальных, будьте осторожней с биржей KuCoin.
Post
Topic
Board Hardware wallets
Re: Fuck you ledger
by
tenant48
on 16/11/2024, 07:34:06 UTC
Please tell me is it safe to exchange Bitcoin on Ledger Live? I see they use a third party provider.

Even though my coins are in cold storage, can they be frozen during the exchange?

You can exchange small amounts if you are not worried about high fees. I would recommend storing and exchanging bitcoins in other wallets, and use Ledger only to store altcoins.
Post
Topic
Board Hardware wallets
Re: [help] My Trezor one broken screen
by
tenant48
on 06/11/2024, 07:09:37 UTC
First, get a display for your wallet, if you don’t find a suitable display, then order a donor wallet from Trezor, from which you can remove the display and take everything to a mobile phones or laptop repair service to have the display replaced. The wallet can be purchased for 49 euros.
https://trezor.io/trezor-model-one
Post
Topic
Board Hardware wallets
Re: New ledger Flex junk
by
tenant48
on 03/11/2024, 10:04:43 UTC
Typically, batteries in new devices of the same type can swell for the following reasons:
1. The layout is too dense. If components are located very close to each other, the battery may become pinched or subject to mechanical stress. This increases the risk of physical damage to the battery and may also cause it to overheat due to heat buildup from nearby cells.
2. Incorrect charge management. The charge controller may be configured incorrectly, allowing the battery to overcharge or deep discharge. Without correct voltage and current regulation, the battery overheats and is subjected to increased stress, which leads to swelling.
These problems often arise due to insufficient testing of the prototype device under various conditions or flaws in the design stage.
It would be better if Ledger made wallets with replaceable batteries like the Passport or Coldcard Q.
Post
Topic
Board Hardware wallets
Re: New backup of 20 words from Trezor.
by
tenant48
on 30/10/2024, 07:52:13 UTC
If you think that you can crack SLIP39 because of the ''flaws'' than contact Trezor devs and get bounty from them.
Good luck Wink

Where did you read what I wrote about hacking SLIP39?
I just wrote that having access to one of the parts of the backup you can get information about share groups and the group threshold. If you do not understand this point, then create a multi-share backup using the converter, publish one part of it here, and I will provide you with information about share groups and the group threshold.

I'm not criticizing the SLIP39 standard, I created a post for people who buy a Trezor wallet and will be faced with choosing a backup type when setting it up.
Post
Topic
Board Hardware wallets
Re: New backup of 20 words from Trezor.
by
tenant48
on 29/10/2024, 07:55:26 UTC
If the attacker it tech savvy, he can decode the SLIP39 mnemonic to bits to see how many required mnemonics and how many backups you have.
That information is certain unlike judging just from the word which is a representation of a 10-bit segment.
The attacker does not need to decrypt everything down to the bits, since the 3rd and 4th word contain information about share groups and the group threshold, source. In addition, as I wrote above, the fourth word can only have 4 options, so it can hardly be called a full-fledged 10-bit segment, information about the fourth word could easily be encoded using 2 bits (00, 01, 10, 11), but Trezor, for some reason, decided to do otherwise.
Also, an attacker does not have to contact the converter every time, but rather create several tables of correspondence between 3 and 4 words to possible backup options in advance.
Post
Topic
Board Hardware wallets
Re: New backup of 20 words from Trezor.
by
tenant48
on 28/10/2024, 12:29:27 UTC
Quote from: nc50lc
So should you switch to the new 20-word backup or continue to use the familiar 12 or 24 words?
If you can, use multiple.
At least compared to a single backup, your bitcoins can still be safe in case one of the backup is compromised.

I meant that a single-share backup of 20 words has no advantage over a backup of 12 words.
Post
Topic
Board Hardware wallets
Merits 2 from 1 user
Topic OP
New backup of 20 words from Trezor.
by
tenant48
on 28/10/2024, 10:08:10 UTC
⭐ Merited by Pmalek (2)
In their new wallets such as Trezor safe 3 or Trezor safe 5, the company suggests switching to the new 20-word SLIP39 backup. Whether to create a backup in the new format or to create it in the more familiar format of 12 or 24 words of BIP39 standard we will consider below.
By default, the user is offered to create a single-share backup of 20 words (with the option to upgrade to multi-share backup) or go straight to creating a multi-share backup.
The advantage of multi-share backup is that you split your secret phrase into several parts and set a threshold (minimum number of parts) to restore access to your funds and if an attacker gains access to one part, he will not be able to access your funds.

Still, if an attacker gains access to one part of the secret, he will be able to obtain information about the total number of parts into which your backup is divided and the minimum threshold.
This information is contained in the 3rd and 4th words of any of the parts.
For example, if you create a regular single-share backup, then the 3rd and 4th words will always be: academic academic.
In multi-share backup, the 4th word is responsible for the total number of parts:
For 2 parts: easy
For 3 parts: leader
For 4 parts: romp
For 5 parts: academic
For 6 parts: easy
For 7 parts: leader
For 8 parts: romp
And so on.
There are a total of 4 possible options for the fourth word. The number of minimum parts (threshold) required to restore access to funds can be determined by the third word using a converter.

Example: Let's say we have one part of the secret:

eraser senior beard leader blanket verify declare exercise rumor year submit custody spine expand document always round photo prevent sugar

Our fourth word is: leader, which means the total number of secrets can be 3. Now we launch the converter and generate phrases (click on the 128bits button), set 3 in Total shares, and select the minimum number of parts in Threshold. In our example, with Threshold equal to 2, we find in the second phrase the word: beard which is the 3rd word of our secret. If the searched word is not found, then set the Total Shares parameter to 7, since the 4th word: leader can also refer to a secret divided into 7 parts. And again we select the Threshold parameter in the search for a match of the third word. But, I don’t think in practice anyone will split their backup into more than 5 parts.

Thus, an attacker, having access to one part of your backup, will be able to assess his prospects. In this case, he will need to gain access to only one more part of the backup.

So should you switch to the new 20-word backup or continue to use the familiar 12 or 24 words?
In my opinion, switching to a single-share backup of 20 words makes sense only if in the future you decide to switch to multi-share backup, which will not be difficult to do with the help of Trezor suite.
In case of creating multi-share backup you need to understand what information an attacker will have when accessing one part of the backup. 
There are no other special advantages of a 20-word backup over a 12-word backup, in both cases random entropy of 128 bits is used.
Post
Topic
Board Трейдеры
Re: Биржа Binance 🔶
by
tenant48
on 06/08/2024, 07:50:29 UTC
Странная проблема честно говоря. Проблему не порешал? Ты точно верно адрес "tex..." копировал (35 знаков)? По моему Трезор только Z адреса не поддерживал, в остальном должно быть без проблем все. Прошивку аппаратнику давно обновлял? Попробуй сгенерировать новый адрес (не в Трезоре) и скинуть с Трезора туда крипту, а потом на Бинанс. Но я почему-то уверен, что это именно траблы с Бинансом. Я попробовал сохранить tex адрес для получения и так же вылезла ошибка о некорректном адресе.

С проблемой до сих пор не разобрался.
Пока только удалось выяснить, что Бинанс обратился в сообщество Zcash с просьбой разработать механизм с помощью которого он сможет отказывать в депозитах с защищенных адресов и возвращать их вкладчику. Для этого был разработан новый формат адресов начинающийся на TEX. Более подробно можно почитать здесь. Какие кошельки поддерживают этот формат пока мне не ясно (Леджер кстати тоже не понимает этот формат).