The hardware manufacturer is Bitbox, and all were responsibly disclosed:
- Remote multisig theft attack (Coldcard, 2020/11)
- Ransom attack on passphrase handling (Trezor/Keepkey, 2020/08)
- Bitcoin mainnet/testnet cross-account signing (Coldcard, 2020/08)
- Malicious Change in Mixed Transactions (Trezor, 2020/03)
There may be more of them that I haven’t found.
This is extremely impressive from them.
Additionally, they were the first to make their hardware wallet (the Bitbox02) resistant against a very advanced attack: the nonce-covert channel attack. AFAIK this attack has never taken place yet, and the only hardware wallets resistant to it are the Bitbox02 and the 3 Blockstream Jades.
Disclaimer: I do not work for Bitbox, but have been a fan of them for a while and think they’re underrated. I’m also fan of Blockstream and their Jade wallets.
submitted by /u/Firone
[link] [comments]
