Replying to Avatar Dikaios1517

There is always some amount of trust.

Even if you are using open-source wallet software, if you can't verify the code yourself, you are trusting someone else to have verified it.

Could wallet software show you a false receive address and just display what you assume to be the correct balance? Yup. It could, and it could do so regardless of whether the wallet is connecting to your own node or someone else's.

Only use wallet software that is tried and tested, like Sparrow, Nunchuk, or Spectre. You can also use multiple of these in conjunction. For instance, use a hardware wallet to store your actual private key, and then use Nunchuk on mobile and Sparrow on desktop, both only having access to your XPUB for generating receive addresses. Then you can confirm between the two that the addresses generated are indeed associated with your XPUB, and not being swapped out by the wallet software. As long as any receive transaction originating from Sparrow shows up in Nunchuk, and vice versa, you know that the address wasn't swapped out, because the chances that the developers of both Sparrow and Nunchuk are colluding against you are small.

Using your own node with the wallet software you use for transacting is still important, but not for the sake of false addresses being swapped in place of real ones. Rather, you should use your own node for the protection of your privacy. Using someone else's node with your wallet software means the node operator can potentially associate your UTXOs with your IP address, and with one another, so that they will know your full balance.

I have asked a question in the past about trusting wallet software to correctly compute the fx rate at point of sale (fiat-BTC)price before. If you dont reside in the US, then calculation is BTC-USD-NZD for example. I do think its best to verify. I am working on a spreadsheet to check all past lightning transactions now.

I never questioned the wallet address though, but transferring money from one wallet to another should carry the same cautions when transferring fiat. If large transactions are done, then do a small amount first, verify and then trust the wallet address.

Reply to this note

Please Login to reply.

Discussion

Does everyone just trust the wallet software to correctly compute the fiat value of the transaction?

nostr:nevent1qvzqqqqqqypzpgt05jcfsufdxlvc2hy6nf6ugwydtqftsnwx0zs7h3r0frldfh4vqqsxyweea3xu8wmq42kr0trv493ygxal6gvhk9utwmg6vshfq4ze0ngrxntnc