# "private key" (compromised OR stolen OR leaked) — X 热门讨论 (2026-10-11 15:37 UTC)
## @nunchuk_io (nunchuk_io) · 10-11 12:32 · ♥111 ↻25 💬14 A few words given the recent exploits on hardware signing devices:
• The Ledger supply chain attack represents one of the most sophisticated attacks thus far on the wallet ecosystem. In many ways it’s a lot more sophisticated than the Coldcard RNG exploit, because that one was software only. This one took a cross-border company buyout, tampering with the devices (implanting an eSIM, an LTE module and a CPU) and manufacturing the implants at scale.
• These sorts of attacks have been predicted by early Bitcoiners, but in Bitcoin they remained theoretical or crude until this year. It shows that the level of sophistication of attacks has risen quickly, and what was previously “good enough” advice on wallets and self-custody is no longer sufficient.
• When we started Nunchuk a few years ago, our premise was that multisig, and multi-vendor multisig, needs to become the standard for self-custody in the future. But even we didn’t expect how fast it would materialize. This is likely due to 2 factors: Bitcoin getting more mainstream, and the rise of AI-assisted attacks. This is a Sputnik moment for Bitcoin self-custody. The defenses need to level up.
• Passphrases wouldn’t have helped in the Ledger case, since you are required to enter the passphrase into the device for it to sign any transactions. A compromised device that phones home the seed phrase can also easily phone home the passphrase the moment you enter it.
• Similarly, generating the private key somewhere else (even by rolling dice) and subsequently importing it onto a tampered device wouldn’t save you here. The device can phone home the seed phrase the moment it’s imported.
• Anti-tampering techniques might help, such as transparent casing or bricking the device if it’s tampered with. Or forever displaying a message once the seal is broken. Or using on-device encryption between the internal hardware components. But a dedicated and resourceful enough attacker can still find ways to get around these layers. Tampering and anti-tampering have long been a cat-and-mouse game. In 2008, card readers doctored right off a Chinese production line sent card data and PINs over mobile networks to Pakistan. The Ledger attack is the same playbook, 18 years later. The bigger the target, the more attackers spend on overcoming the defenses.
• You should order directly from the vendors as much as possible, using a PO box for privacy.
• Any setup that relies on a single hardware/software stack or a single vendor should be considered at risk.
• Building your own hardware signers from generic parts is a good option for technical users.
• Multi-vendor multisig should become the standard. Each signer should have a completely independent hardware/software stack from the other signers. The point is that there shouldn’t be any single-point-of-failure anywhere in your setup.
• Many advanced protocols rely on timelocks and the recovery path being a simple singlesig. The recent attacks and exploits should highlight how dangerous this could be. Timelocks simply delay a risk. If a seed is compromised and there’s a timelock involved, the attacker just needs to wait out the timelock. (For Miniscript wallets, there’s the wallet descriptor too, but presumably it also gets sent to the device at some point.) Vault-like protocols face a similar problem: any withdrawal or recovery path that relies on a single key is a potential single point of failure.
• For our on-chain timelock-assisted wallets, in a few weeks we are adding the option to customize the recovery path to be an M-of-N, so that, if you want, spending would require multiple keys at all points during the wallet’s lifetime. > 引用 @MagicalTux: @moo9000 Left to right: e-SIM, CPU with firmware able to recognize Ledger's font as shown on screen and capture words as they appear on screen, and a LTE module that can connect once the seed has been fully captured. https://t.co/Y3R88hO4Xs https://x.com/nunchuk_io/status/2109260970354987186
## @Tangem (Tangem) · 10-11 14:23 · ♥20 ↻0 💬4 Hey Tindorr! Let me provide you with some clarity:
1. Tangem Wallet is built with an open and decentralized architecture. Your access to crypto does not depend on Tangem's continued existence, app stores, or company servers. Details: https://t.co/ViIShcgTCr
2. Losing all your devices will result in losing your funds. Only your Tangem device can grant you access to the wallet. The number of devices in your backup determines how many copies of your private key exist. Therefore, we recommend storing your devices in different locations. If one is lost or stolen, you can purchase a new Tangem wallet and transfer your funds to it. Details: https://t.co/7GK1gjOjAA
3. If you lose your phone, you can install Tangem on another phone and scan your card. If you’ve also forgotten the access code, you can reset it with that card and another card from the same wallet, provided access-code recovery is enabled on both. That does mean someone with two of your cards could potentially reset the code, so keep backup cards in separate, secure places. A seed phrase provides a separate recovery option if your devices are lost.
It's important to ask questions about security. Please feel free to reach out anytime, and don't hesitate to ask our Support as well at support@tangem.com or use the Tangem app: Main screen → three dots in the top-right corner → Contact Support → Open Mail / Open Chat. https://x.com/Tangem/status/2109288809959506254