84adam
Joined 2 years ago
Karma
4
Submissions
5
Member since
Sep 26
Joined 2 years ago
Note: There are specific address types that are safer to use for long-term storage than others, such as Native SegWit addresses starting with `bc1q`. The newest Taproot type starting with `bc1p` is insecure because it directly encodes a "tweaked" public key into the addresses.
Source: https://newsroom.clevelandclinic.org/2024/02/19/cleveland-cl...
The main problem here, I think, is that Coldcard (Coinkite) was one of the largest and most heavily promoted hardware wallets in the space. Many of the top influencers promoted them. And the bug in RNG was actually introduced inadvertently in an effort by Coinkite to move the firmware away from an open source license to a 'source viewable' license.
None of the other hardware wallet manufacturers introduced this class of bug into their firmware.
In-depth review of other solutions being done by many in the community now, of course. E.g.: https://xcancel.com/bitcoinsbanker/status/208361209471318024...