Telegram Community: https://xitter.cf/t.co/TrhrXTT7r9 Github: https://xitter.cf/t.co/FcxwFTheQW
Bitcoin
Joined January 2018
- Tweets3.7K
- Following1.3K
- Followers15.9K
- Likes8.3K
Pinned Tweet
👻Specter-DIY v1.10.5 is out 🔐
Security hardening for randomness and transaction verification:
- TRNG fails safely
- Stricter change-output verification
- Mixed-wallet input warnings restored
- Reproducible builds fixed
github.com/cryptoadvance/spe…
🤖 Made with AI
The Specter Fan @arh9992 made a full Chinese one‑hour guide for the @SpecterDIY Hardware Wallet without Smartcards.
Everything from assembly to antiphishing words and making your first transaction.
Highly valuable even auto‑translated to English:
🎬 youtube.com/watch?v=DPW9j0Qt…
Specter retweeted
What changes when a hardware wallet communicates without a cable or Bluetooth?
@Schnuartz will compare cable and Bluetooth devices with air-gapped signing via SD card and QR code, and explain the security and transparency trade-offs.
📅22 Oct · Lugano👇️
luma.com/yawcgo0t?utm_source…
Specter retweeted
I totally get the offline laptop thing, I did exactly that for my earliest cold storage. But with what is coming to SeedSigner, SpecterDIY, Krux and Kern, these microcontroller projects are going to offer increasingly decisive advantages over the offline laptop approach. With support for dozens of development boards any association with bitcoin goes away so you sidestep all of the supply chain risk; you lose the attack surface of an entire microprocessor OS + app; you get better assurances wrt wireless comms being truly disabled; you can get something brand new still at a very low cost; the form factor is much easier to use and store; and the UX becomes much more intuitive and specialized like a HWW rather than a general purpose computer/OS. The advantages of FOSS + DIY are going to become undeniable.
Specter retweeted
Vielleicht doch das Wallet komplett selbst bauen?
@SeedSigner
@SpecterDIY
Je mehr ₿itcoin desto mehr liegt
mir daran das "DIE FESTUNG"
sicher von "Einflüssen" ist.
Für den Mainstream ist das sicher nichts, aber die sichern den Seed auch auf einem Stück Papier 🤷🏼♂️
Specter retweeted
@SeedSigner
KruxWallet
@SpecterDIY
maybe:
@BitBoxSwiss (although I don't like the UI and forced USB connection)
@Trezor
Specter retweeted
@SeedSigner and @SpecterDIY (the latter when new version is out on harsware you can buy).
Specter retweeted
I'll echo this recommendation. Out of abundance of caution, rotate your keys (seed phrases) if you generated or used them on a Ledger, especially a Nano X or Flex. To be fair, there's no evidence of compromise from Nano S or S+ models. But if a wallet was funded back in 2021, this could be a wide-ranging attack going back a long time.
As always, multi-vendor multisig (or DIY, @SeedSigner or @SpecterDIY) is the best combination defense against any single hardware wallet or seed generation issue.
🚨 PUBLIC SERVICE ANNOUNCEMENT
At Bitsurance, we've advised all our Ledger clients to rotate their seed phrases as a precaution.
According to Galaxy Research, some of the earliest drained addresses were funded as far back as 2021.
We're actively investigating and have reason to suspect a potential supply-chain attack involving German resellers.
Better safe than sorry: Generate a new seed phrase on a different, trusted device and migrate your funds.
Need help? Contact us.
The DIY Hardware Wallet just allow you this🙌
Ahora que las DIY están al alza, recuerda:
- DIY es "hazla tú mismo". Nada de comprar @SeedSigner o @SpecterDIY ya montada. Ahí se pierde la lógica de las DIY para eliminar el ataque de cadena de suministro
Aquí artículo de 2021 sobre cómo armarlo
estudiobitcoin.com/seedsigne…
The very first @SpecterDIY of @silentlink1 👀
At this early point without Case.
Specter retweeted
Exactly what we expected when we were starting silent.link and choosing security hardware.
Hence @SpecterDIY
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
Specter retweeted
I hope they make something!
But yes I agree @SeedSigner @selfcustodykrux @SpecterDIY is the future of hardware wallets
And of course @SparrowWallet etc on air-gapped computers
And multi-sig obviously
Specter retweeted
@Excellion I think @SpecterDIY @ClavaStack is doing at least similar important work - though I find it EVEN MORE IMPORTANT. Please have a look, retweet and SUPPORT.
Told you guys in 2023 that @SeedSigner is one of the most important projects in Bitcoin. Support their work.
Specter retweeted
The best PC gamers in the world build their own PC's.
So you want to be your own bank? Than you should probably be building it with your bare hands!
$90M+ gone, not from a Ledger “hack,” but from tampered, resealed devices sold through a reseller.
The box no one can tamper with? The one you build yourself.
Monday 5PM CST: DIY signers — SeedSigner, Krux, Specter & Jade. El Zonte.
Specter retweeted
Guter Punkt! 🔐 @SpecterDIY ist für alle interessant, die bei Self-Custody weitergehen wollen:
Air-gapped Signing und Multisig für zusätzliche Sicherheitsebenen.
Den „Specter DIY Shield Light“ habe ich selbst ausprobiert.
Wer sich dafür interessiert:
5% Rabatt mit meinem Code:
Bitcoinkannjeder
clavastack.com/?coupon=Bitco…
Specter DIY ermöglicht dir:
Air-Gapped:
Signieren komplett offline
Multisig: Mehrere
Signaturen für maximale Sicherheit
Open Source: Vollständig überprüfbar
Specter retweeted
It just happened.
$86M hacked because of a supply chain attack.
With @SpecterDIY, we have been warning about this attack vector since 2019.
This is why you can build it yourself.
This is why you can open it at any time.
This is why you can flash it yourself.
oh my god this is worse than we thought
here's @Ledger $86M exploits explained
> cryptobilis was a reputable and authorized Ledger/Trezor/OneKey dealer for over 4 years
> they decided to sell the company to a Chinese guy (most likely patsy for DPRK) from northern China in MARCH 2026
> the "Chinese guy" modded the devices within the supply chain itself (physical), namely Nano X devices, to contain an implant module
> ledger validity/genuineness check CANNOT detect this because hw wasn't actually tampered with, just spied on
> quoting @MagicalTux:
" implant just monitors what's shown on the screen, will take note of the seed as it's shown to you, then transmits it to 3rd party"
> former owner chimes in on X (pic below) to say that "they were under a NDA" to not mention anything to anyone for 6 months
> they obviously didn't alert any of their partners that they were authorized to sell devices of... because NDA, duh!! its in the name!
> conveniently, funds start getting siphoned a few weeks before this magical NDA due date, and being laundered across all blockchains
Specter retweeted
While I was adapting the @SpecterDIY hardware for esp32-p4.
I realized that @Schnuartz had sent me a Java Card that predicts the future.
Specter retweeted
Hahaha, so cool
Sandman working on @SpecterDIY 2
While I was adapting the @SpecterDIY hardware for esp32-p4.
I realized that @Schnuartz had sent me a Java Card that predicts the future.
The recent Ledger incident shows why supply chain security matters for hardware wallets.
Specter DIY takes a different approach.
Built with off-the-shelf components, open-source firmware, and reproducible builds.
Reduce trust in manufacturers. Increase verifiability.
oh my god this is worse than we thought
here's @Ledger $86M exploits explained
> cryptobilis was a reputable and authorized Ledger/Trezor/OneKey dealer for over 4 years
> they decided to sell the company to a Chinese guy (most likely patsy for DPRK) from northern China in MARCH 2026
> the "Chinese guy" modded the devices within the supply chain itself (physical), namely Nano X devices, to contain an implant module
> ledger validity/genuineness check CANNOT detect this because hw wasn't actually tampered with, just spied on
> quoting @MagicalTux:
" implant just monitors what's shown on the screen, will take note of the seed as it's shown to you, then transmits it to 3rd party"
> former owner chimes in on X (pic below) to say that "they were under a NDA" to not mention anything to anyone for 6 months
> they obviously didn't alert any of their partners that they were authorized to sell devices of... because NDA, duh!! its in the name!
> conveniently, funds start getting siphoned a few weeks before this magical NDA due date, and being laundered across all blockchains
Specter retweeted
In case anyone needs a reminder on how to buy a hardware signing device 👇
Or even better yet, build one from open source hardware like @SpecterDIY @SeedSigner @selfcustodykrux
oh my god this is worse than we thought
here's @Ledger $86M exploits explained
> cryptobilis was a reputable and authorized Ledger/Trezor/OneKey dealer for over 4 years
> they decided to sell the company to a Chinese guy (most likely patsy for DPRK) from northern China in MARCH 2026
> the "Chinese guy" modded the devices within the supply chain itself (physical), namely Nano X devices, to contain an implant module
> ledger validity/genuineness check CANNOT detect this because hw wasn't actually tampered with, just spied on
> quoting @MagicalTux:
" implant just monitors what's shown on the screen, will take note of the seed as it's shown to you, then transmits it to 3rd party"
> former owner chimes in on X (pic below) to say that "they were under a NDA" to not mention anything to anyone for 6 months
> they obviously didn't alert any of their partners that they were authorized to sell devices of... because NDA, duh!! its in the name!
> conveniently, funds start getting siphoned a few weeks before this magical NDA due date, and being laundered across all blockchains