Nostr'a Katılın
2026-08-05 02:01:20 CEST
in reply to

Moon on Nostr: Glad you were able to avoid being impacted by the cold card exploit. Ledger has in ...

Glad you were able to avoid being impacted by the cold card exploit.

Ledger has in their firmware, “opt in”functionality for remote key extraction. I do expect that this will be catastrophically exploited at some point in the future.

Ledger is also closed source - similarly ColdCard’s shift away from and subsequent hostility to open source contributed to this exploit going unfixed for years.

Without giving an recommendations, here are a few open source Bitcoin only projects that you may want to consider in your future set up:

Sparrow Wallet (sparrowwallet dot com - note, Sparrow does not have any official apps on App or Google App stores, any apps claiming to be Sparrow are scam wallets to steal keys)

Blockstream Jade Plus

Foundation Passport Plus

Bitkey by Block

SeedSigner (though it requires more technical acumen than the others)