An anti-tampering system would have prevented this supply chain attack. Hard day for the industry 😞

Happy to support this initiative 🤝 Every time a serious bug surfaces, users' funds and years of builders' work are at stake. Responsible disclosure exists to protect them, & not just vendors' reputation. Find it quietly, fix it fast, update users, then talk. That order saves people. Glad to make this the industry standard together. We will hold up our end. Respect to @P3b7_ & all our industry peers 🤝

Every item on this list exists because someone asked "but why should I trust you on that?" Fair question. So we removed ourselves from the answer 🫡

If you don’t self-custody your Bitcoin, you don’t own your Bitcoin.

Very cool first step! Yes, signature grinding is expensive, requiring hours of compute for one tx. Definitely not a sustainable option. But it proves the point: quantum resistance on Bitcoin is achievable, not just theory anymore. A protocol-level upgrade is still a must. And when it comes, the whole stack has to move with it. Signing device included. New signature schemes mean new firmware, maybe new chips, new everything. Post-quantum readiness is on our radar for sure.

Bumping this one more time. The replies so far have been genuinely useful - some are already shaping our roadmap discussions. If you haven't answered yet: what do you actually need from your hardware wallet? I'm reading everything.

Stop fudding hardware wallets. Stop fudding self-custody. Stop driving people back to CEX. Let's take a step back before jumping to conclusions. The right to private property is an inviolable human right. Bitcoin is the only asset where that right is perfectly exercisable. No intermediary, no permission, no counterparty. And self-custody is the only way to exercise it. That hasn't changed. Not today. To self-custody properly, your private key must never touch an internet-connected device. Ever. Paper wallets are fragile and error-prone. Software wallets keep your keys on devices exposed to malware, viruses, and keyloggers around the clock. Hardware wallets exist to solve exactly this. They isolate your private key in a dedicated offline environment, so signing a transaction never requires your key to leave the device. That separation is the whole game. Yes, hardware wallets started rough. Clunky UX, steep learning curves. But the industry evolved because every incident forced it to. That's not a bug in how this space matures. It's the mechanism. Mt.Gox cost us 700,000 BTC. It taught us why self-custody matters. FTX cost us 100,000 more. It taught us why "not your keys" is non-negotiable. The ColdCard incident is teaching us what robust self-custody actually looks like. This is tuition. Painful, real, and necessary. Laozi said it 2,500 years ago: inside every disaster, fortune is already taking root. We will come out of this more resilient, more rigorous, and closer to a world where every individual can truly hold their own financial freedom. We're still here. Still shipping.

What happened to Coldcard users breaks my heart. People who did everything right, who chose self-custody, who took security seriously, lost their entire BTC stack. I have deep respect for @nvk and everything @COLDCARDwallet has stood for. He's been one of the most serious, uncompromising defenders of Bitcoin security we've had. Losing that force from the space, however this plays out, is genuinely painful to watch. Still, I won't soften this: this was a serious mistake, and it has shaken something bigger than one product. The confidence people place in hardware self-custody itself is now in question. Here's where Keystone stands: Keystone 3 Pro uses 3 independent TRNG sources, an MCU, and 2 separate Secure Elements, combined for final entropy. That trustless architecture was a deliberate design choice, not an afterthought. But this incident is making me ask: what more should we be doing? I want to hear directly from you: Which BTC software wallets should we integrate with next? Which BIPs are you waiting on us to support? What would make multisig, dice roll entropy, or any BTC UX meaningfully safer or simpler? To put it plainly: what do you actually need from your hardware wallet? Reply here. I'm reading everything.