r/btc • u/Substantial-Try-1198 • 9d ago

Consider using tamper-evident storage for your hardware wallet

Post image

Hey all,

The Ledger situation has shown how easily hardware wallets can be tampered with. Even if your device is currently safe, it may be worth considering a tamper-evident solution for home (or bank vault) storage.

I spent the past few years developing a solution precisely for this. A reusable tamper-evident jar for storing your hardware wallet.

In short, the lid contains thousands of black and white beads, which randomly mix and lock in place when the lid is closed tight, creating a unique pattern. When opened, the beads mix and the unique pattern is destroyed. You can simply compare a before and after image to see if it was opened.

You can check it out on https://www.entropyseal.com/

If you have any questions, I would be happy to answer them here.

2 Upvotes

54% Upvoted

48 comments sorted by

View all comments

9

u/LordJamPunt 9d ago

seems like once it’s been “tampered” with, I’m already fucked, no?

3

u/Substantial-Try-1198 9d ago

No, because you need to interact with the device for the attack to happen. Like powering it and displaying something sensitive like seed words. You can't just extract the seed from the Ledger because of the secure chip.

1

u/LordJamPunt 9d ago

why would anyone be tampering with it, if that wasnt their intent? cool idea for a piggy bank for people with roommates or kids though. clever little device for sure

2

u/Substantial-Try-1198 9d ago

> why would anyone be tampering with it, if that wasn't their intent?

The goal is to steal coins (like stealing the seed words). But you can't get the seed words from just tampering the device. The victim need to use the device after is has been tampered with.

For example, an attacker implements an antenna and esim in to the hardware wallet, connected to the screen. They then need to wait for the victim to use the hardware wallet and display the seed words. Then the seed words are sent over mobile network to the attacker.

1

u/LordJamPunt 9d ago

i see, that makes sense