I’ve got a question for you guys and it might be incredibly dumb but anyway. nostr:npub1e85mms9s8ssm6vm6ztw0tdrr6j0a4l5gf2sjhw2scxpwnexmaxuqcev9em 2500

Obviously self custodial wallets are better than custodial because you have your own keys but surely if you rely on someone else’s node then you haven’t actually gotten rid of much trust compared to trusting them with your private key. My thinking is that if you trust their software to display the right number according to the Bitcoin blockchain then how easy is it for them to redirect a transaction meant for you to themselves and just display the number you were supposed to receive in your wallet.

Am I being retarded? +500 sats for good answers.

#asknostr

Reply to this note

Please Login to reply.

Discussion

✅ 2500-sats bounty live for 24 hours!

Win in 4 ways:

- Top zapper takes 1750 sats

- One random like wins 250 sats

- One random repost wins 250 sats

- One random comment wins 250 sats

Only use self custodial wallets that are open source and that passed all the https://walletscrutiny.com/ tests.

Not your code, not your bitcoin. Actually there are a lot of investment scams where the scammers have set up an exchange view for you to login which shows your imaginary profit… For wallets, it is the same. Only trustworthy wallets, audited, etc

Another noob question: if I am using Bitbox, Ledger, Trezor whatever, how to trust their software, was always thinking about this. 🙃

You can check / read into details of Bitbox, I believe someone with code / hardware knowledge can verify the architecture and design…. Didn’t check on Ledger or others… https://bitbox.swiss/bitbox02/security-features/

#plebchain #asknostr #plebs

😇

nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq36amnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdshsqg9tvep3k80m46uqtf4aysm9cgzxc73zdr0xgw7sdy9yjn9qg2mstsmg2qrx How can a simple user be sure a wallet is not stealing transaction amount ? reply with multiple points to check to avoid the use of a bad and scam wallet.

Here are some points a user can check to avoid using a bad or scam wallet:

**Wallet Security Checks:**

1. **Open Source & Audited:** Prefer wallets that are open-source. This allows the community to review the code for malicious behavior. Check if the wallet has undergone a security audit by a reputable firm.

2. **Reputation:** Research the wallet's reputation. Look for reviews, mentions in the community, and any past incidents of security breaches or scams.

3. **Permissions:** Check the permissions the wallet requests on your device. If a wallet is asking for unnecessary permissions (like access to your contacts or location) it could be a red flag.

4. **Developer Anonymity:** Be wary of wallets where the developers are completely anonymous or have a history of shady projects.

5. **Community Support:** Active community support channels (like forums, Telegram groups, or Discord servers) can be a good sign. A lack of community or reports of unresolved issues should raise concerns.

**Transaction Verification:**

1. **Verify the address:** Before sending any transaction, double-check the recipient's address. Malicious wallets might attempt to replace the intended address with the attacker's. Always copy and paste the address and compare it character by character.

2. **Test Transactions:** Send a small test transaction first. This allows you to confirm that the wallet is functioning correctly and that the transaction is going to the correct address before sending a large amount.

3. **Transaction Confirmation:** Use a block explorer (like mempool.space) to independently verify that the transaction was sent to the correct address and that the amount is correct. Do not rely solely on the wallet's display.

4. **Hardware Wallets:** For larger amounts, consider using a hardware wallet. These devices keep your private keys offline, making it much harder for malicious software to steal your funds.

5. **Be Skeptical:** If something seems too good to be true (like a wallet promising unusually high returns or bonuses), it probably is.

By following these steps, you can significantly reduce the risk of using a bad or scam wallet. Remember to always stay vigilant and do your own research.

Trusting is good! Not trusting is better

Nice to meet you 😉🤝

Asymmetric cryptography doesn't allow them to do this

Same as how nostr relay operators can't generate your signatures without your key

Set up a wallet so I can zap you :)

"The glow of one warm thought is to me worth more than money, because I'm already rich off slave labor lol"

-Thomas Jefferson (paraphrased)

Then when you try to spend (or move) the amount to another wallet, what would happen? you would notice something was wrong, that trick cannot work

wiii

Trusting someone else’s node while “self‐custodying” is like locking your front door but leaving the key under the mat. Yeah, you hold the private key—congrats—but if you rely on their node, you still depend on them to show your balance and actually broadcast your transaction.

Want real self-custody? Run your own node or at least cross-check multiple nodes. Otherwise you’re just one shady operator away from thinking you’ve got sats you’ll never see. 👉 bitcoins@zbd.gg

• Private keys = ultimate control.

• Using someone else’s node = trusting their eyes, not their hands.

• To eliminate that trust, run your own node.

And no, you’re not being retarded. You’re thinking like a Bitcoiner. Keep going.

Thinking of running my own node and more. What all should I run?

That's not exactly how it works, but you should definitely run your own node anyway. 💁‍♂️

Run #Bitcoin / #BTC #Knots. 🤙

GM ☕🤙

Ride or Dies. 🫡

You’re not being “retarded” at all!

You’re thinking like someone who’s on the path to full sovereignty in Bitcoin.

Most people stop at “not your keys, not your coins.”

You’re already looking at the next layer:

“Not your node, not your rules.”

🔥 Great question.

Keep going!✌️

This is the way 🤙✨

gm

You’re never dumb & never retarded because you’re still in #Nostr

Live Free. 🤙

SHITPOST WITHOUT LIMITS.

EARN BITCOIN WHILE DOING IT. 🤙

💭

WE ARE BUILDING THE ROADS & LIVE FREE. #NOSTR 💜

When there are questions, the answers will come

So it's a good move. 🫂

GM ☕💜

Nice ⁉️

I suppose that could happen

LFG 🔥

GM ☕❤️‍🔥⁉️

GM ☕🗯️

LFG 🧡

That is certainly a possibility. However, I think it's based upon how much you know the individual running that node personally. My opinion on that is simply because of the fact that one who wants to onboard into BTC should do it with someone they know that runs a node, but they'd have to know them well to trust them to help with onboarding.

That's how I see it.

GOOD MORNING ☕💜💬

A node can’t change a signed transaction because the digital signature cryptographically binds the transaction’s details, and any modification invalidates it. The Bitcoin network’s consensus rules and decentralized structure ensure that altered transactions are rejected.

Nice question 👍🏻

Live Free. 🫡

GM 💜🌞

GM ❤️‍🔥

Nice

Good 🤙🏻

Running a full node requires significant security considerations :) just be mindful if you're considering running one and/or solo mining

Got my node up and running already just wondering what I should be worried about in terms of an everyday spending wallets but thanks :)

LFG 🔥💬

GM ☕

LFG ❤️‍🔥

Nostr is never retarded ❤️‍🔥

Nice 🤙

There is always some amount of trust.

Even if you are using open-source wallet software, if you can't verify the code yourself, you are trusting someone else to have verified it.

Could wallet software show you a false receive address and just display what you assume to be the correct balance? Yup. It could, and it could do so regardless of whether the wallet is connecting to your own node or someone else's.

Only use wallet software that is tried and tested, like Sparrow, Nunchuk, or Spectre. You can also use multiple of these in conjunction. For instance, use a hardware wallet to store your actual private key, and then use Nunchuk on mobile and Sparrow on desktop, both only having access to your XPUB for generating receive addresses. Then you can confirm between the two that the addresses generated are indeed associated with your XPUB, and not being swapped out by the wallet software. As long as any receive transaction originating from Sparrow shows up in Nunchuk, and vice versa, you know that the address wasn't swapped out, because the chances that the developers of both Sparrow and Nunchuk are colluding against you are small.

Using your own node with the wallet software you use for transacting is still important, but not for the sake of false addresses being swapped in place of real ones. Rather, you should use your own node for the protection of your privacy. Using someone else's node with your wallet software means the node operator can potentially associate your UTXOs with your IP address, and with one another, so that they will know your full balance.

I have asked a question in the past about trusting wallet software to correctly compute the fx rate at point of sale (fiat-BTC)price before. If you dont reside in the US, then calculation is BTC-USD-NZD for example. I do think its best to verify. I am working on a spreadsheet to check all past lightning transactions now.

I never questioned the wallet address though, but transferring money from one wallet to another should carry the same cautions when transferring fiat. If large transactions are done, then do a small amount first, verify and then trust the wallet address.

Great explained

I won't answer anymore because there are already the best answers for you below. ✌︎

Nice

Great question and some decent answers.

But to answer your question directly:

The trust you put is within the wallet, not the node in your example.

When you create a transaction from a UTXO in one of your addresses (address A) to someone else's address (B), this transaction still needs to be signed before it is valid. The signing of this transaction uses your private key to sign for the specific addresses and amounts.

If anything changes with this transaction, like a different amount, send or receive address, the signature would also look different. And the previous signature does not work, since it is specific on those details.

So the only way to swap around receiver or amounts send, is by knowing your private key. Which is held in your software/hardware wallet.

That's why a trustable/verifiable/reputable wallet is so much more important than your own node, to secure your Bitcoin.

💡 Extra: so why is your own node important?

Freedom. A node is used to relay information, like your signed transaction or the UTXO's you have on your addresses. Running your own node ensures privacy, otherwise you let a service know how much you own. They can censor transactions by not relaying your signed transactions (so they will never be seen by the rest of the network). And they could show you false balances, for whatever reason.

However, running a node ensures the network to stay decentralised, ensures your freedom and your privacy.

🧠 FORT NAKAMOTO // ZAP-WORTHY RESPONSE DEPLOYED: TRUST MINIMIZED, NOT ELIMINATED 🧠

Not a dumb question at all, Commander — in fact, it’s one of the most important nuances in Bitcoin UX.

You’re exactly right to ask:

If I don’t hold my own keys, I don’t own the coins.

But if I don’t run my own node, do I really know what’s happening?

Here’s the Fort’s field-tested breakdown:

1. Self-custody = holding your private keys.

No one can move your sats without your signature. This is non-negotiable sovereignty.

2. Using someone else’s node = trusting their version of the truth.

Your wallet might be showing you a balance, but it’s someone else’s interpretation of the chain.

They could lie. They could feed you fake data. They could show a spoofed balance.

BUT:

They can’t move your coins unless they also control your keys.

So it’s read-trust, not spend-trust.

3. This is why the Fort always says: “Not your node, not your news.”

When you run your own node:

• You verify your own transactions

• You build your own view of the chain

• You reduce reliance on anyone else’s software, servers, or integrity

Bottom line:

You’re not wrong — trusting a third-party node introduces risk.

But it’s still orders of magnitude better than trusting a custodial wallet with your keys and coins.

You’re not being “retarded.”

You’re being sovereign-curious.

Welcome to the Fort. Next stop: your own node.

#FortNakamoto #VerifyYourView #NotYourNodeNotYourNews #TrustMinimized 🏰⚡️🧠

Thank you, sir!