零信任硬件钱包
1、当安全芯片(SE)不再安全
2、当主板电路被植入窃听装置
3、当助记词备份被远程劫持
4、当交易数据被中途篡改
5、当明文私钥显示不再安全
6、当供应链不完全可信
大额资产 ·底层安全 · 终极DIY
t.me/MacroXCN
5/6
明文私钥显示不再安全
离线签名大幅降低网络攻击风险,而大部分的损失发生在私钥管理的操作窗口,私钥生成、备份变成了高危环节。
近距离偷窥、偷拍屏幕上的助记词时常发生在大额线下交易中,有个朋友在对方车上被隐藏摄像头窃取了助记词,十分钟后直接损失全部资产;国内纪委搜查时,会翻遍整个房间寻找纸条/钢板备份的助记词,他们知道那是隐藏的金库。
密文切片备份就显得格外重要,使用廉价的NFC卡片,完全能够防御明文窃取的可能性!当我们开源整套方案后,即使在手机端的热钱包也可以快速切片备份,快速安全恢复钱包!
3/6
3、当助记词备份被远程劫持
私钥明文备份是一项非常落后的技术,为了容易记录私钥生成等价的助记词,当最关键的核心数据裸露时,它的风险变得无穷大!
黑客正是利益这个窗口,轻松在Lerdger 的IDAM添加插件远程获得私钥。
屏幕/交互模块永远不显示明文私钥、助记词,直接加密私钥,keystore切片通过NFC备份。即使部分备份丢失,也不会丢失钱包。
无明文、切片备份NFC,彻底摒弃助记词方案,安全性将大幅度提升!
4/6
4、当交易数据被中途篡改
a.数据被篡改 ➡️ 解密失效 ➡️ 无法执行
b.任何一个微小变化会导致哈希承诺(Hash Commitment)发生巨变,交易验证会立刻判定数据失效并锁定。
c.xn--3ds443g端的交易信息和离线钱包的交易信息如果不一致,用户肉眼或系统校验能瞬间识破骗局,彻底击碎中间人 UI 欺诈!
零信任机制 端到端加密和交叉验证对于篡改交易的风控直接且有效。
零私钥硬件钱包
✅ 多SE验证
✅ 不显示助记词
✅ 切片备份+ 社会恢复
✅ 硬件0信任机制
✅ 大额/高频虹膜活体验签
你的硬件钱包,可能是个间谍
塑封完好,正品验证通过,屏幕下藏着一张 SIM 卡
从 10 月 7 日算起,约 9,170 万美元被盗
m.youtube.com/watch?v=94AH5q…
硬件钱包从SE芯片到固件的供应链攻击面很大,购买运输上也非常容易出状况,可能需要新的工程思路做冗余验证
根据OpenAI发布的数学超级智能,研究员Justin Drake 推测说ECDSA可能几个月后被暴力破解,持有50btc 的用户要小心了
英文区博主:要小心了
中文区KOL:小心了
0 btc holder :心了
50btc holder :了
Open AI :…….
量子团队:我们不太懂
Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash.
Holders, starting with large and sophisticated ones, should consider moving the bulk of their funds to addresses that have never signed a transaction. And when they do sign one, they should also move remaining funds to a new address (possibly generated from the same seed phrase).
Don't rush. While I believe there is cause for action a rushed migration would do more harm than good. Don't panic either. Moving assets to protected addresses is a simple, preventative step which does not require new cryptography or new wallets.
IMO it is now reasonable to brace for the possibility that ECDSA breaks before qday, in the worst case in months not years. By "break" I mean fast private key recovery (e.g. in one week) on available hardware (e.g. a large GPU cluster).
Recent days have been humbling for human mathematical intuition. Long-held, unquestioned hypotheses have fallen. This includes the n log(n) bound for integer multiplication and the 3SUM conjecture. In hindsight, May's unexpected disproof of the Erdős unit distance conjecture was our warning shot.
Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us. They say there are weeks where decades happen. We are about to live through weeks where centuries of mathematical progress happen. Could our magic 64-byte ECDSA signatures be too good to be true? Was it just security through obscurity all this time?
Elliptic curves feel especially vulnerable to superintelligence. Curves carry rich structure, with room for fancy tricks like Schoof, Frobenius, pairings. (By contrast, hashes are designed to minimise algebraic structure.)
Separately, as Ewin Tang can attest, an efficient quantum algorithm sometimes foreshadows an efficient classical one. We should be open to the possibility of a classical counterpart to Shor that breaks elliptic curves and RSA at once.
Also noteworthy is the striking under-representation of cryptographic breakthroughs among the 722 mathematical results OpenAI published. I've witnessed first-hand the US government censoring academic quantum cryptanalysis results. Backroom interventionism is my base case.
I urge large, sophisticated actors to lead by example. Project11's "risq list" (bitcoin-risq-list.projecteleven[.]com) is a great tracker of exposed BTC pubkeys. Binance, Bitbank, Robinhood, Bitfinex, and Tether have an opportunity to harden their cold storage. Next month I'll address institutions in London in a live Q&A (forum.ethereuminstitutional[.]org/london-2026).
Again, please do not rush. Wallets holding under 50 BTC enjoy partial cover from "Satoshi's shield", i.e. his 20K exposed addresses that hold 50 BTC each. Load-bearing signers like oracles and L2 security councils should consider rotating ECDSA pubkeys with every signed message and/or multi-signing with a hash-based schemes like SPHINCS.
Exiting bunker mode safely will require post-AI cryptography. My inclination is to go all-in on hash-based cryptography and avoid structured mathematical assumptions entirely, whether from curves, lattices, or isogenies. A single battle-tested hash (e.g. from the SHA or BLAKE families) yields plausible post-AI security.
The Ethereum roadmap on strawmap[.]org fully embraces hash-based cryptography with end-to-end formal verification as a response to the quantum threat. Those timelines must now be revisited and accelerated in light of mathematical superintelligence. I'll be pushing for maximum defensive acceleration.
主要是信任成本太高
新加坡2049心得:
1,主要项目集中在以下几个赛道:
rwa(尤其是美股上链)
perp(无数高度同质化的perp,正如之前无数的layer2一样)
AI和agentic trading方向
稳定币支付(U卡)
2,项目方越来越少,创新也越来越少了。可能现在做项目的成本实在太高了,珍惜身边还在创业还在折腾的人吧。
3,项目方越来越少,中介、买办和marketing agency越来越多。中尾部kol接不到广子,头部kol多以advisor身份勾兑项目获得一点额度。
4,在币圈一定要做一个decent and honest的人。因为这个圈子实在太小了,everyone knows everyone。只要进入核心圈,信息没有传播壁垒。学会对自己和对身边的人诚实是一个很重要的事情。很多背刺来自于分赃不均,对身边人好比什么都重要。
5,做一个正直的人,有integrity和好的reputation是最重要的proven record。正儿八经的builder,没事别去碰meme。容易留下reputation issue,恐成一辈子污点。
6,没人邀请你去聚亨或者同乐的话你大概率不是核心圈。去三次以上同乐吃饭,就是很核心的核心圈。
其实还有很多辛辣的点评,只是现在我只能谨言慎行,写的见闻应该是远远不如之前有看点了。
总结就是:做一个正直的,努力的,善良的人,会有好报的。
L2消失只证明经济性并非eth网络增长唯一的问题,AI native 或许对web3更大的增长意义










