Global Feed Post Login
Replying to Avatar Luke Dashjr

PSA: There is a supply chain attack on Bitcoin wallets going on.

HARDWARE WALLETS AND SIGNAL MAY BE AFFECTED. READ FURTHER.

I have not studied the full scope of this attack yet, but from what I hear, it can impact websites/webapps (including "local" webapps like Signal Desktop) and cause them to display a thief's address instead of the intended one.

This means hardware wallets will correctly display the actual send-to address, but you the human may compare the address to one that has already been replaced!

Regardless of what wallet you use, verify the address you are sending to without trusting a computer. Call your recipient and verify verbally.

Avatar
Tristan Hillerich 3mo ago

This is why you use nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqywhwumn8ghj7mn0wd68yttsw43zuam9d3kx7unyv4ezumn9wsqzp4x68cuj3umqm0xrzuwycqxs7x588zae3xkksx3fm3k4lwqrdjrvpzq3p6

Protects against this exact form of attack

nostr:nevent1qvzqqqqqqypzplw4arm2urdcz7lqkuw6ypyccxqxj6xc5eze2kwzf8ej97nnge98qqs8hn7vjws75vs8tl2jh37whs9em0anksnnc24efvkks4xk56xy43qvgryve

Reply to this note

Please Login to reply.

Discussion

No replies yet.