Pinned Tweet
I had Kimi K3 audit @Bitkey published code, firmware & legal docs.
Verdict: Block (or a govt leaning on them) can't steal keys or freeze funds (per published source code)
Weak points: fingerprint unlock, data trail, unverifiable iOS app.
Full analysis 👇
new @Bitkey firmware/app update
Update: new Bitkey release (app 2026.16.0 + device firmware). The headline: they shipped a fix for the login issue I flagged last time.
⚠️→✅ The "two-factor login that's secretly one-factor" problem is being repaired. Recap: some accounts registered the same login key for phone and device, so server checks that should require both could be passed with one. (Never about your bitcoin keys — the login keys are separate.) Now, when those accounts complete or cancel a recovery, the app detects the mismatch and asks for a fresh approval on the hardware device — "Confirm this is your account" — which re-establishes the proper two-device binding. Physical tap required; malware on your phone can't fake it. The watch item from my last update is on its way to closed.
💰 New (behind a switch): recover stray coins with "App Key Wallet." Your phone holds one of your three keys, and it's possible for bitcoin to end up controlled by that key alone — outside your main wallet's balance (e.g. after certain recovery scenarios). This new tool scans the blockchain for such coins and sweeps them into your main 2-of-3 wallet. Two honest tradeoffs, both disclosed in the app: the scan reveals those addresses to the Bitcoin server you query, and until swept, those coins are protected by your phone alone. Not visible to everyone yet.
📱 "Finish onboarding your device." Some people who set up the new screened Bitkey (W3) early never completed a step that cryptographically ties their account to their genuine device. The app now shows those accounts a critical Security Hub recommendation and walks them through completing it.
👆 Deleting a fingerprint now actually deletes it. Two firmware fixes: a failed storage erase could leave fingerprint template data behind after "deletion" — the device now detects and cleans that up. And you can no longer delete your last fingerprint from the device's own menu (the app already blocked this; the device menu didn't).
📊 New data leaving your phone — one to note, not fear. Analytics events now include your phone's security posture: whether you have a lock screen at all, how old your Android security patch is, whether it's an emulator, and whether it has a StrongBox security chip. No wallet data (no balances, addresses, or notes), and likely there to spot fraud and insecure setups — but it is new information about your device going to Bitkey's analytics. Worth knowing it started.
🧹 Smaller stuff: login-token handling hardened (fewer random "please re-verify" failures mid-recovery), better foldable-phone layouts, and exchange rates are now kept per-environment so stale prices can't linger.
Still nothing on: hardware PIN unlock (fingerprint stays your only way in — 5th Amendment issue stands). Transaction verification, the configurable recovery waiting period, and transaction notes all remain built but switched off.
Net: the account-login repair is the big one — the one open issue from my last update is being fixed in the wild. Combined with the fingerprint cleanup, this is a maintenance-heavy release in the best sense.
(Same caveat: based on the published snapshot; shipped code may differ.)
Update: Bitkey published ~2 months of new code (app 2026.13.0 + fresh server and firmware). I had Kimi K3 read the the whole diff. Here's what matters for you:
🔬 First steps toward verifiable firmware. Today there's no way to check that the firmware running on your Bitkey matches the published source code. They just added tooling to publish checksums of every firmware file they ship — the foundation for making that check possible. The Android app already has this.
🔑 Crash reports can no longer leak your hardware key. Quick saga: earlier this year, a crash at the wrong microsecond could bundle key material from the device's memory into a diagnostic report that gets uploaded to a third-party service. Bitkey fixed it in August, quietly removed the fix in September, and has now replaced it with a stronger one: memory-capturing crash reports are switched off entirely on the chip that holds your keys — the report your key could hide in no longer exists.
🔒 Fingerprint reset is now locked to your device. If your fingerprint stops working, the app can re-enroll it through a back-and-forth with your Bitkey over NFC. That conversation now verifies it's happening with your device (by serial number) at every step — so an attacker can't slip a different Bitkey into the process and use it to interfere with or hijack the reset.
🛡️ The app now double-checks your backup before letting you receive money. Recovering a Bitkey wallet relies on a backup of your wallet's "descriptor" (the instructions for finding your coins), stored with Bitkey. Previously, the app sometimes verified that backup was intact before showing you a receive address; now it checks every time, and if it can't confirm a working backup exists, it won't show you an address at all. It means you can never receive coins into a wallet you'd be unable to recover.
📱 The new screened Bitkey (W3) is now the default for everyone, and early upgraders are getting a gap closed: they set up before a step existed that cryptographically ties your account to a genuine device, and the app now detects those accounts and completes that tie retroactively, in the background.
⏳ Coming (behind a switch): you can choose how long recovery takes. If you lose your phone or device, Bitkey recovery has a mandatory waiting period before funds move — during which you're notified and can cancel if it wasn't you. Soon you'll be able to set that window to 7, 14, or 30 days. Changing it requires physically tapping your hardware device, so malware on your phone can't shorten it. Not visible in the app yet.
📝 Coming (behind a switch): private labels on transactions. You'll be able to attach notes ("rent", "paycheck") to transactions, synced across your devices. They're encrypted on your phone before syncing, so Bitkey stores them but can't read them.
🇺🇸 US users can now get recovery alerts by SMS. If someone starts a recovery on your wallet, you get warned so you can cancel. SMS is just the messenger — it changes who gets alerted, not who can move your coins.
🧹 Smaller stuff: on iPhone, diagnostic logs now strip out keys, addresses, and transaction IDs before being uploaded to Bitkey's monitoring provider (Android already did this). Another weak-randomness fix in security code. And a new server-side cap closes a loophole where "spend without your hardware device" transactions could be structured to look smaller than they were and dodge your daily limit.
Still nothing on: hardware PIN unlock — your fingerprint remains the only way into the device, and the 5th Amendment issue from my original thread stands. The "transaction verification" extra-confirmation feature is also still switched off.
Net: a solid couple of months — mostly genuine hardening, plus one fix that had to be caught twice. I'll keep watching.
(Same caveat: based on their published snapshots; shipped code may differ.)
Update: new Bitkey release (app 2026.16.0 + device firmware). The headline: they shipped a fix for the login issue I flagged last time.
⚠️→✅ The "two-factor login that's secretly one-factor" problem is being repaired. Recap: some accounts registered the same login key for phone and device, so server checks that should require both could be passed with one. (Never about your bitcoin keys — the login keys are separate.) Now, when those accounts complete or cancel a recovery, the app detects the mismatch and asks for a fresh approval on the hardware device — "Confirm this is your account" — which re-establishes the proper two-device binding. Physical tap required; malware on your phone can't fake it. The watch item from my last update is on its way to closed.
💰 New (behind a switch): recover stray coins with "App Key Wallet." Your phone holds one of your three keys, and it's possible for bitcoin to end up controlled by that key alone — outside your main wallet's balance (e.g. after certain recovery scenarios). This new tool scans the blockchain for such coins and sweeps them into your main 2-of-3 wallet. Two honest tradeoffs, both disclosed in the app: the scan reveals those addresses to the Bitcoin server you query, and until swept, those coins are protected by your phone alone. Not visible to everyone yet.
📱 "Finish onboarding your device." Some people who set up the new screened Bitkey (W3) early never completed a step that cryptographically ties their account to their genuine device. The app now shows those accounts a critical Security Hub recommendation and walks them through completing it.
👆 Deleting a fingerprint now actually deletes it. Two firmware fixes: a failed storage erase could leave fingerprint template data behind after "deletion" — the device now detects and cleans that up. And you can no longer delete your last fingerprint from the device's own menu (the app already blocked this; the device menu didn't).
📊 New data leaving your phone — one to note, not fear. Analytics events now include your phone's security posture: whether you have a lock screen at all, how old your Android security patch is, whether it's an emulator, and whether it has a StrongBox security chip. No wallet data (no balances, addresses, or notes), and likely there to spot fraud and insecure setups — but it is new information about your device going to Bitkey's analytics. Worth knowing it started.
🧹 Smaller stuff: login-token handling hardened (fewer random "please re-verify" failures mid-recovery), better foldable-phone layouts, and exchange rates are now kept per-environment so stale prices can't linger.
Still nothing on: hardware PIN unlock (fingerprint stays your only way in — 5th Amendment issue stands). Transaction verification, the configurable recovery waiting period, and transaction notes all remain built but switched off.
Net: the account-login repair is the big one — the one open issue from my last update is being fixed in the wild. Combined with the fingerprint cleanup, this is a maintenance-heavy release in the best sense.
(Same caveat: based on the published snapshot; shipped code may differ.)
.@Bitkey is quietly making some solid app/firmware/server improvements.
Update: Bitkey published ~2 months of new code (app 2026.13.0 + fresh server and firmware). I had Kimi K3 read the the whole diff. Here's what matters for you:
🔬 First steps toward verifiable firmware. Today there's no way to check that the firmware running on your Bitkey matches the published source code. They just added tooling to publish checksums of every firmware file they ship — the foundation for making that check possible. The Android app already has this.
🔑 Crash reports can no longer leak your hardware key. Quick saga: earlier this year, a crash at the wrong microsecond could bundle key material from the device's memory into a diagnostic report that gets uploaded to a third-party service. Bitkey fixed it in August, quietly removed the fix in September, and has now replaced it with a stronger one: memory-capturing crash reports are switched off entirely on the chip that holds your keys — the report your key could hide in no longer exists.
🔒 Fingerprint reset is now locked to your device. If your fingerprint stops working, the app can re-enroll it through a back-and-forth with your Bitkey over NFC. That conversation now verifies it's happening with your device (by serial number) at every step — so an attacker can't slip a different Bitkey into the process and use it to interfere with or hijack the reset.
🛡️ The app now double-checks your backup before letting you receive money. Recovering a Bitkey wallet relies on a backup of your wallet's "descriptor" (the instructions for finding your coins), stored with Bitkey. Previously, the app sometimes verified that backup was intact before showing you a receive address; now it checks every time, and if it can't confirm a working backup exists, it won't show you an address at all. It means you can never receive coins into a wallet you'd be unable to recover.
📱 The new screened Bitkey (W3) is now the default for everyone, and early upgraders are getting a gap closed: they set up before a step existed that cryptographically ties your account to a genuine device, and the app now detects those accounts and completes that tie retroactively, in the background.
⏳ Coming (behind a switch): you can choose how long recovery takes. If you lose your phone or device, Bitkey recovery has a mandatory waiting period before funds move — during which you're notified and can cancel if it wasn't you. Soon you'll be able to set that window to 7, 14, or 30 days. Changing it requires physically tapping your hardware device, so malware on your phone can't shorten it. Not visible in the app yet.
📝 Coming (behind a switch): private labels on transactions. You'll be able to attach notes ("rent", "paycheck") to transactions, synced across your devices. They're encrypted on your phone before syncing, so Bitkey stores them but can't read them.
🇺🇸 US users can now get recovery alerts by SMS. If someone starts a recovery on your wallet, you get warned so you can cancel. SMS is just the messenger — it changes who gets alerted, not who can move your coins.
🧹 Smaller stuff: on iPhone, diagnostic logs now strip out keys, addresses, and transaction IDs before being uploaded to Bitkey's monitoring provider (Android already did this). Another weak-randomness fix in security code. And a new server-side cap closes a loophole where "spend without your hardware device" transactions could be structured to look smaller than they were and dodge your daily limit.
Still nothing on: hardware PIN unlock — your fingerprint remains the only way into the device, and the 5th Amendment issue from my original thread stands. The "transaction verification" extra-confirmation feature is also still switched off.
Net: a solid couple of months — mostly genuine hardening, plus one fix that had to be caught twice. I'll keep watching.
(Same caveat: based on their published snapshots; shipped code may differ.)
hey @bitrefill, having to wait for a digital gift card for 24h without prior warning is unacceptable
Those poor matrices
researchchamber.fun/
This quoted post is unavailable.
Some storage I bought earlier this year
Seagate 8TB IronWolf
Purchased at €276.99 (March 2026) → now €434.78
Increase: €157.79 → +57.0%
VIOFO 512GB Industrial microSD
Purchased at €154.09 (June 2026) → now €267.80
Increase: €113.71 → +73.8%
Crazy
I only have one thing to say to my friends in Brazil:
If you can, get the fuck out _while you can_.
Betting that Brazil will stop being a clown country during your lifetime is one of the worst bets I can think of.
É a última vez que comento sobre o assunto. Vcs sofrem torcendo com o Brasil. Esqueçam isso. Se acostumem com a ideia que NÃO IRÁ MUDAR NUNCA, e se isso não cair bem para o que vc espera do seu futuro, vá embora.
Seja Flávio. Seja Lula. Não importará.
Brasilia não vai mudar NUNCA.
Os donos do Judiciário nunca serão punidos, repito: nunca acontecerá nada com eles, no máximo um ou outro que desrespeitar “a máfia” vai rodar.
Os oligarcas que esmagam competidores, escrevem leis, vão continuar mandando. Não importa o quão “tecnológico” é o futuro, as mesmas empresas e famílias vão continuar mandando em diversos setores, e ai de quem ousar competir.
Ninguém vai lutar pra cortar imposto, melhorar as leis, reduzir regulação. Seja de direita, ou de esquerda, vcs NUNCA verão mais que meia dúzia de políticos tentando isso. Os outros 99% querem que vc, sua empresa, sua família e seus ideais se phodam. Eles não trabalham pra vc rsrs
O máximo que vcs vão ver, vai ser propaganda que agora o país vai vender minerais e comida pra fora, ou pra China ou pros EUA, assim dá pra dar uma enganada na balança comercial e continuarmos comemorando que “escapamos do rebaixamento de novo”.
O Brasil é isso meus amigos. Um time que comemora “escapar do rebaixamento” como se fosse um título. Quem ousar mudar isso e ser campeão, o sistema mata ou prende.
Nem mesmo se vier uma crise como a que afetou nossos irmãos argentinos, nosso povo será capaz de escolher por mudança de verdade, na base da sociecade para cima.
Ou vc adota a mentalidade antifrágil do tipo “isso aqui é uma selva e eu vou ganhar dinheiro e depois tirar do país e phodase” , ou vc vai passar a vida sofrendo, acreditando em algo que nunca acontecerá. Seja agora, seja em 2036, 2046 etc
Ganhando ou Flavio ou Lula: phodase
Zvn retweeted
I was able to decompile and analyse 494 wallets on the AppStore.
I found 45 apps that raised red flags for me during my research.
I looked specifically for 2 things: private keys exfiltration and weak entropy.
