In this video, I send bitcoin to a compromised Coldcard mk3 to see how fast the funds are wiped.
I created 5 wallets:
1. Standard Seed Phrase using the insecure RNG.
2. The same seed phrase with 3 different passphrases (1 word, 2 words, 3 words)
3. The same compromised seed
2-of-2 vs 2-of-3 multi-sig
My current thought is that neither is “better” than the other
It depends on your situation - where you reside, where you can safely store keys etc.
The question is - how can I store all seeds so that:
- there is no single point of failure
- no
The main “complexity” with multi-signature is the descriptor file.
In order to “build” your multi-sig vault, you need the public keys for each wallet involved in that multi-sig.
Without the public keys, your wallet coordinator (like Sparrow) can not “access” your funds to
Here is information on all the mk3 wallets I created, that HAVE BEEN SWEPT by attackers:
Seed phrase only (swept instantly):
bc1qqh58wf33u6vcpurh493j46d23zz7jyn5s06sqn
Seed phrase + 1 word passphrase (swept in 6d 9h):
bc1q4nhqvhyvs342m52h46qw0mkjsejpcncwx4y46t
Seed phrase + 2
