{"id":18360,"date":"2026-08-05T10:42:45","date_gmt":"2026-08-05T17:42:45","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18360"},"modified":"2026-08-05T12:12:49","modified_gmt":"2026-08-05T19:12:49","slug":"337-coldcard-hack-seedsigner-with-seed","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/08\/05\/337-coldcard-hack-seedsigner-with-seed\/","title":{"rendered":"ColdCard Hack &amp; Seedsigner with Seed"},"content":{"rendered":"\n<figure class=\"wp-block-image alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"600\" src=\"https:\/\/jasonsblog.ddns.net\/wp-content\/uploads\/2026\/08\/image.png\" alt=\"\" class=\"wp-image-18242\" style=\"width:456px;height:auto\" srcset=\"https:\/\/jasonsblog.ddns.net\/wp-content\/uploads\/2026\/08\/image.png 800w, https:\/\/jasonsblog.ddns.net\/wp-content\/uploads\/2026\/08\/image-300x225.png 300w, https:\/\/jasonsblog.ddns.net\/wp-content\/uploads\/2026\/08\/image-768x576.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">I&#8217;m just not on board with anyone that recommends the <a href=\"https:\/\/seedsigner.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Seedsigner<\/a> over other hardened hardware wallets, as it has no secure elements or engineering to harden the physical device you construct from off the shelf components. And since it doesn&#8217;t hold your seed phrase, you have to rely on QR code sheets or input the seed phrase, leaving you incredibly vulnerable to hidden camera attack. And the hardware does no security check on software, with one attack of compromised software sending out parts of your secret key in the transactions on the <a href=\"https:\/\/jasonsblog.ddns.net\/index.php\/2025\/09\/12\/the-case-for-the-only-cryptocurrency-of-value-bitcoin\/\" target=\"_blank\" rel=\"noreferrer noopener\">Bitcoin<\/a> public blockchain for others to harvest, so much for airgapped security. And you&#8217;re utilizing an opensource hobby project on regular computer hardware, which for me falls into the same boat as the Coldcard project that was just exploited for over $100 million dollars (so far), wiping out many people&#8217;s life savings. For it to be safe you&#8217;d have to store the device and your QR code sheets in a very high quality safe, and sweep the room for cameras hoping they have an RF signal&#8230; Of course this is for people with significant holdings (not me), but still I wouldn&#8217;t trust it with more than a few hundred dollars. There are also some RF concerns, which is covered in the interview below, and make sure you use an USB blocker to disable the data wire connection of the USB connection. On the positive you could construct the device in a new country or location without signaling you have a hardware wallet, more easily use multisig&#8230; But those would be unique temporary use cases&#8230; It might be alright as one signer in a multisig setup with diversified hardware wallets as specified in the interview.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"337. ColdCard Hack &amp; Seedsigner with Seed\" width=\"1290\" height=\"726\" src=\"https:\/\/www.youtube.com\/embed\/jIVx2o9khnU?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Consequently, I liked the book <em>The Bitcoin Standard<\/em>, but Saifedean has a lot of sponsors, and I <a href=\"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/08\/05\/deanonymizing-monero-transactions-in-tor-network\/\" target=\"_blank\" rel=\"noreferrer noopener\">posted<\/a> already today what I think of sponsored influencers. And sometimes when I listen to him and some of the things he comes up with, did he write the books? Is he a spook? Too many books is a sign of the spook ghost writers&#8230; <\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;m just not on board with anyone that recommends the Seedsigner over other hardened hardware wallets, as it has no secure elements or engineering to harden the physical device you construct from off the shelf components. And since it doesn&#8217;t hold your seed phrase, you have to rely on QR code sheets or input the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-18360","post","type-post","status-publish","format-standard","hentry","category-tech"],"blocksy_meta":[],"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=18360"}],"version-history":[{"count":2,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18360\/revisions"}],"predecessor-version":[{"id":18362,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18360\/revisions\/18362"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=18360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=18360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=18360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}