<oembed><type>rich</type><version>1.0</version><author_name>Moon (npub1th…m930q)</author_name><author_url>https://nostr.ae/npub1th6p84x9u5p4lagglkvm8zepa2dq4s9eanp57vcj4w5652kafads7m930q</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>Glad you were able to avoid being impacted by the cold card exploit.&#xA;&#xA;Ledger has in their firmware, “opt in”functionality for remote key extraction. I do expect that this will be catastrophically exploited at some point in the future. &#xA;&#xA;Ledger is also closed source - similarly ColdCard’s shift away from and subsequent hostility to open source contributed to this exploit going unfixed for years.&#xA;&#xA;Without giving an recommendations, here are a few open source Bitcoin only projects that you may want to consider in your future set up:&#xA;&#xA;Sparrow Wallet (sparrowwallet dot com - note, Sparrow does not have any official apps on App or Google App stores, any apps claiming to be Sparrow are scam wallets to steal keys)&#xA;&#xA;Blockstream Jade Plus&#xA;&#xA;Foundation Passport Plus&#xA;&#xA;Bitkey by Block&#xA;&#xA;SeedSigner (though it requires more technical acumen than the others)</html></oembed>