Ledger Backdoor?

Can we trust anyone? Like what the hell Ledger?

1 Like

you should be ok as long as you don’t update the firmware. Thing is we’ve always trusted Ledger, Trezor, any 3rd party, closed source manufacture/developer to not secretly add a firmware update that extracts your seed.

I recommend https://seedsigner.com/ or https://yeticold.com/

Yeah I’m pretty filthy about it, might just get USB sticks and put the core wallets of them. I haven’t updated my ledger but I have lost trust in it, and I memorized my 24 word pass phrase so I could leave everything and still have funds if I had to lol

2 Likes

Honestly, if Ledger has a backdoor into every wallet they sold, I seriously doubt the ledger wallet would need to be plugged in for the backdoor to work… Super inconvenient on their part

In my opinion, safest simply not to use it.

1 Like

Look into tangem. Easy to use with very affordable price. Many good reviews online

1 Like

I just checked out their site and looks pretty dope, but areyou able to mine BTC into these wallets or you have to mine into a hot wallet to then transfer it into tangem

You can mine directly into a cold wallet. The cold wallet only needs to be physically connected when sending out funds.

I just read some threads and apparently ledger doesn’t recommend mining bitcoin into the cold wallet. I don’t know if Tangem has the same issue. Concept seems pretty cool with tangem though.

I’ve never been a fan of multi-wallets or USB wallets. They have many flaws and are generally un-usable in real world aplications.
A cell phone wallet is actually viable in real world cases such as payments (scanning QR codes) or for cashing out on the spot at a BTC ATM machine.
The amount of exploits done to Cellular and USB wallet devices is un-countable. Exploits piggy back and evolve.
I like to use the Phantom wallet hack as a great case example of the possibilities. The creator of Phantom wallet created the Smart Contract that hacks the wallets on Nov. 21, 2021 . The hack emailed him the private keys, pass/name and all info of any newly created Phantom wallets on the SOL network.

He initiated his hack around July 2022, but before he did, Trust wallet copied the code for Phantom and applied it to their wallets. Just as the hack seemed to be “doom” it stopped. In that “stopped” time, the hacker figured out how to exploit apple and android administrator codes, via the Trust wallet user permissions. So then the hacks began again. But here’s the piggy back part, once the hack was on Trust wallet it gained access to all SOL network tokens, then used the EVM to also get ERC and BEP network tokens. So what started as a Phantom Wallet Hack, turned into the ERC, BEP, SOL attack on Trust wallets on cell phones.

Here’s where the bullshhhh gets thick. To fix the problem, Binance deleted all endorsements or proof of ownership of Trust Wallet (they purchased the company back in '19). They rolled back the wallets to a non-Phantom version. Then they just re-payed all the wallets out of their own pockets.

That last part is the kicker. So Trust had complete records of all wallets and could take or add assets when ever they wanted. So Trust itself is like a giant exploit/hack but they run it like a business.

Centralization is the real issue in most cases. Trust, Razor, Keepkey, Exodus ect ect ect all have a centralized server that connects all the wallets to “THEIR” blockchain, which then accesses the WWW blockchain of the networks you hold tokens or coins with.

I have solid advice. Buy a cheep computer and use it as a wallet. A HP All-In-1 works fine (about 300-400 bucks). Never go on the web. Download all wallet programs to a flash drive and import them to that computer. Run only main/core wallets to networks. The biggie is to create a computer/wallet with no cookies, backdoors or even create chances for backdoors. While another comp is not for everyone, if a person has a few thousand dollars in crypto, a comp/wallet is a must. I then unplug and power down that computer. I keep wallets on other computers and devices but that computer is my 1 .

I’d also add, this is nothing new. More like a bi-yearly occurrence. Wallets going tits up is sadly common. The common thread I see is New. All the old stuff works just fine. Blockchain.com wallets are still OK. Elecetronium wallets are still top dog (no one uses them). And a CLI is still the One. Every token or blockchain network has a CLI wallet program. There is no better wallet than a CLI. The issue people have with them is they only work on 1 network. But as far as transfer fee’s and direct access to the blockchain CLI is it.

And Yeah CLI / GUI wallets can be tricky. We’re on Vosk, I have full faith in all members here to be able to figure out CLI. If you can edit an ASIC to connect, you can figure out CLI.
(side note) there is a fix about CLI’s and modern token networks. The fix is that they only offer CLI’s on Linux, not windows or Mac. Personally I believe the reason they only offer Linux is to limit users. If they made them windows accessible every Dick and Tom would be using them and it would greatly effect the NFT markets (tech and artwork). In a way, it’s a Litmus test. If you can’t run Linux, they don’t want you farting around on the CLI network.

If you only ran CLI wallets, the blockchain network itself would have to go down to effect you, but since you’d be on a CLI , you would become the network if the entire worlds network went down. CLI is the shit. The btc CLI was the first program and wallet released to introduce bitcoin. It was the best then and is the best now. To know blockchains without knowing CLI is to not know shit about blockchains or crypto.

CLI = you are the crypto, the brains and the electronic power behind it
Multi-wallet = you are the target consumer

5 Likes

I’ll definitely look into that, but do you know if tangem wallet supports LBRY? I have some LB Boxes that I wanna test to see if I can mine straight into the cold wallet since its only a small amount and without the risk of losing majority of my mining rewards.

I think Tangem supports hundreds of cryptos. I’m still waiting on my cards to arrive.

wtf!, yeti is crazy

2 Likes

I just changed from ledger to a Ellipal Titan not sure if lbry is one but there 10k plus coin supported

1 Like

All wallets accept mining. Think of how the blockchain works , in ledger form. Every single deposit is entered onto the blockchain. Your wallet does not hold the crypto , per say, the blockchain documents that your wallet address has received or contains crypto. (the same info on the blockchain that miners use to validate a transaction, they don’t talk to your wallet, they talk to the blockchain to get the truth about your wallet)

When you turn your wallet on, or do an update/re-block , it communicates with the blockchain and searches every block since you last logged in for your wallet address and any entries containing your address, in reference to sent or received crypto.

So when we hear that a wallet or company discourages mining into their wallets , here’s why. They run a 3rd or 4th gen blockchain that runs their wallet system. That wallet is not on the "real blockchain’ it’s on the private blockchain of that company. So their system will never restart or update/re-block. While it may seem like you just “turned your wallet on” their blockchain keeps your wallet active the entire time. (no re-checks or updates)

It’s nearly impossible to lose crypto that has been entered into the blockchain under your address. Unless the 3rd party company is a joke. In reference to Tangram… ohh fuck no, not with a 10 foot pole. Who TF needs a 3rd party crypto wallet. LOL like a credit card, except a credit card is unique and viable. Tangram is a joke and a 1/2 . Might as well lend me the crypto you mine, I’ll at least give you returns. At current, you are mining, then lending your earnings to a 3rd party bank located Where ??(fuck who knows), benefiting who (who TF knows). Will your crypto be safe with them … Yeah the police and US gov will enforce on them.

In crypto, you are the bank, you are the Govn’a. If you willingly give your funds to a 3rd party… Maybe just go back to cash. There is zero regulation or oversight that obligates Tangram to be trustworthy, only their greed. I understand it was a promotion around here, so was FTX and LUNA.
I tried to whisper Vosk team to warn them about TanSCAM, but unfortunately they are not paid to read my warnings, they are paid to promote groups who have zero integrity products.

CLI or bust.

1 Like

If you’re interested in learning the backside of Tangram - Getting Started with Tangram’s Cypher Wallet | by Tangram | Tangram | Medium

You will notice Tangram is based on a CLI , but then connected to a Litecoin Lightning Network to allow holding custom coins/tokens. The link I provided is to an earlier Tangram program, before the physical wallets.

The article will explain how and why mining into a LTC Lightning Network does not work cleanly because the LTC Lightning Network does not keep real time 100% connect to the real blockchain and instead only references it to double check your account/wallet. Because the lightning network controls every single Tangram wallet, they discourage mining to it because the LTC Lightning Network has too much traffic already.

To stress, CLI . “5. There are many options for desktop wallets but there is one type that stands apart, a Core Wallet or sometimes also referred to as a GUI (Graphical User Interface) or CLI (Command Line Interface, MS Dos). In short, it’s the original wallet for any specific cryptocurrency or the wallet developed and distributed by the cryptocurrency’s developers. A core wallet is one of the safest ways to store your cryptocurrency, but it is not as convenient as a multi-crypto wallet.”

1 Like

I appreciate your insight, but I think there might be a confusion. I never mentioned Tangram or even heard of them. I mentioned Tangem cold wallet. Unless they are created by the same party then I understand point.

I am seriously considering using paper wallets for certain coins long term like bitcoin, doge and ravencoin.
No third party firmware, not seed phrases, never connected online, super cheap.
As long as I don’t generate the wallets while connected online and clear the cache on my printer, I should be OK…or am I wrong?

Yes,

Also if you have a large sum you shouldn’t put it all in a single wallet. Multiple wallets with smaller sums decreases your odds of being completely compromised