3 entries tagged seed phrase. All writing.
SEPTEMBER 10, 2026 A Jar Is Not a Vault: Reading My Friend's Lightning Wallet Before I Recommend It A friend of mine spent six months building a self-custodial Lightning wallet that runs in a browser, and he'd be the first to tell you it has no audit. I trust him — which is exactly why I shouldn't ask you to trust it on my say-so. So I read the code, checked the served binary against the published hashes, and worked out what the trust model really is. Along the way, the thing every Lightning wallet review should say and mostly doesn't: what a Lightning wallet is for, and what it is not. SEPTEMBER 10, 2026 The Phishing Email Really Was From Trezor On September 9th roughly 347,000 people got an email from help@trezor.io warning them about a chip flaw in their wallet and pointing them somewhere to check it. It was a phishing attack — and it came from Trezor's real domain, passed every authentication check a mail server performs, and borrowed its cover story from two vulnerabilities that are genuinely real. This is Trezor's second breach in a month and its third this year, and not one of them touched the device. AUGUST 4, 2026 A Twenty-Five-Minute Window, and Why I Split the Key A firmware bug sat undetected for five years, then drained over a hundred million dollars from Coldcard wallets in one week. Why I have never trusted a single device with all of mine, and what my Bitkey actually does.