Trezor (One, Model T) Ledger (Nano S, Nano X, Stax) BitBox02 Blockstream Jade Keystone BitKey
Software wallets using npm: Nunchuk Blockstream Green Muun BlueWallet Phoenix (for on-chain only, not Lightning) Zeus (on-chain) Exodus Tangem
Hardware not affected (no npm reliance): Coldcard SeedSigner Krux Specter DIY Foundation Passport
Desktop software wallets not affected: Sparrow Specter Desktop Electrum Wasabi
nostr:npub1tg779rlap8t4qm8lpgn89k7mr7pkxpaulupp0nq5faywr8h28llsj3cxmt 👀
nostr:npub1qvphhla9f5dt7xf7phtw43jtjhk8hnexgqn0nc0d9jumpca8ahvq6rlyfw 👀
nostr:nprofile1qqsrf5h4ya83jk8u6t9jgc76h6kalz3plp9vusjpm2ygqgalqhxgp9gpzemhxue69uhkzarvv9ejumn0wd68ytnvv9hxgqgkwaehxw309a3xjarrda5kuetj9eek7cmfv9kqs6xl8h
nostr:nprofile1qqsfy229w70e8lgtxavlz9t78k06yrel6fxyhreteafqet8kfxhhwmgpr9mhxue69uhhqun9d45h2mfwwpexjmtpdshxuet59uq3vamnwvaz7tmjv4kxz7fwwpexjmtpdshxuet5uzhxm7
Got nostr:nprofile1qqsdfk378y50xcxmeschr3xqp5834pechwvf445p52wud40msqmvsmqpzdmhxue69uhhqatjwpkx2urpvuhx2ue0aj34cu?
Coldcard and sparrow for the win 💪💪
nostr:npub19canpmsgykwumm43uxmp0l5sernavvnrf87mau9a6xnjfx6ajjhsh9qj29
you have to find solution that is compatible with your technical ability, but trezor should really discontinue the trezor one. Its demonstrably been unsecure.
Signing devices and clients should not be made by same people
So if I’ve got a Trezor Model 3 I should be ok then? What is the risk and has anyone actually lost bitcoin?
The risk is in your software client by trezor being compromised. And you approving a tx to a malicious address.
Coldcard + Sparrow = 💯
Script kiddies hacked script kiddies.
Sorry state of a hype ...
JavaScript bug enables Wallet hacking. Details to stay safe below.
nevent1qqsvje9a3s9czvvwk9sh5vr62zxng692jggp8ypla74wfyjlpeehj5gpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgt6awg6
Thx for update
Glad to see the most secure money is being secured by hardware wallets using JavaScript. Makes sense to me. SMH.
Yeo, convenience has been a major factor in the fiat economy for years.
nostr:npub1tg779rlap8t4qm8lpgn89k7mr7pkxpaulupp0nq5faywr8h28llsj3cxmt is not affected
How so? Their accompanying app uses NPM as far as I know.
https://nitter.net/BitBoxSwiss/status/1965187227795030044
npm is not the problem, but rather compromised packages that you download via npm. If you have good configuration management with fixed versions, you can quickly find out whether you are affected
FYI, Nunchuk is unaffected. Nunchuk does not use Javascript or NPM.
https://primal.net/e/nevent1qqs04ag02shk3fw998vlrmp763psj6tne2umq6vctzlwd52vc4wvg6gu3wy3s
