‘Bitcoin Family’ changed security after recent crypto kidnappings

A wave of high-profile kidnappings focusing on cryptocurrency executives has rattled the business — and prompted a quiet security revolution amongst a few of its most seen evangelists.

Didi Taihuttu, patriarch of the so-called “Bitcoin Household,” mentioned he overhauled the household’s total security setup after a string of threats.

The Taihuttus — who offered the whole lot they owned in 2017, from their home to their sneakers, to go all-in on bitcoin when it was buying and selling round $900 — have lengthy lived on the outer fringe of crypto ideology. They travel full-time with their three daughters and stay completely unbanked.

Over the previous eight months, he mentioned, the household ditched {hardware} wallets in favor of a hybrid system: Half analog, half digital, with seed phrases encrypted, break up, and saved both by means of blockchain-based encryption providers or hidden throughout 4 continents.

“We’ve got changed the whole lot,” Taihuttu instructed CNBC on a name from Phuket, Thailand. “Even when somebody held me at gunpoint, I am unable to give them greater than what’s on my pockets on my cellphone. And that is not quite a bit.”

CNBC first reported on the household’s unconventional storage system in 2022, when Taihuttu described hiding hardware wallets throughout a number of continents — in locations starting from rental flats in Europe to self-storage models in South America.

As bodily assaults on crypto holders turn into extra frequent, even they’re rethinking their publicity.

This week, Moroccan police arrested a 24-year-old suspected of orchestrating a sequence of brutal kidnappings focusing on crypto executives.

One sufferer, the daddy of a crypto millionaire, was allegedly held for days in a home south of Paris — and reportedly had a finger severed throughout the ordeal.

In a separate case earlier this 12 months, a co-founder of French pockets agency Ledger and his spouse had been kidnapped from their house in central France in a ransom scheme that additionally focused one other Ledger government.

Last month in New York, authorities mentioned, a 28-year-old Italian vacationer was kidnapped and tortured for 17 days in a Manhattan condominium by attackers making an attempt to extract his bitcoin password — surprising him with wires, beating him with a gun, and strapping an Apple AirTag round his neck to trace his actions.

The widespread thread: The pursuit of crypto credentials that allow on the spot, irreversible transfers of digital property.

“It’s undoubtedly scary to see a variety of these kidnappings occur,” mentioned JP Richardson, CEO of crypto pockets firm Exodus. He urged customers to take security into their very own arms by selecting self-custody, storing bigger sums on {hardware} wallets, and — for these holding important property — exploring multi-signature wallets, a setup usually utilized by establishments.

Richardson additionally advisable spreading funds throughout totally different pockets sorts and avoiding massive balances in scorching wallets to scale back threat with out sacrificing flexibility.

That rising sense of vulnerability is fueling a brand new demand for bodily safety with insurance coverage corporations now racing to supply kidnap and ransom (Ok&R) insurance policies tailor-made to crypto holders.

However Taihuttu is not ready for company options. He is opted for full decentralization — of not simply his funds, however his private threat profile.

Because the household prepares to return to Europe from Thailand, security has turn into a continuing subject of dialog.

“We have been speaking about it quite a bit as a household,” Taihuttu mentioned. “My children learn the information, too — particularly that story in France, the place the daughter of a CEO was nearly kidnapped on the road.”

Now, he mentioned, his daughters are asking troublesome questions: What if somebody tries to kidnap us? What is the plan?

Although the women carry solely small quantities of crypto of their private wallets, the household has determined to keep away from France completely.

“We bought slightly bit well-known in a distinct segment market — however that area of interest is changing into a very large market now,” Taihuttu mentioned. “And I feel we’ll see an increasing number of of those robberies. So yeah, we’re undoubtedly going to skip France.”

Even in Thailand, Taihuttu not too long ago stopped posting journey updates and filming at house after receiving disturbing messages from strangers who claimed to have recognized his location from YouTube vlogs.

“We stayed in a really stunning home for six months — then I began getting emails from individuals who discovered which home it was. They warned me to watch out, instructed me to not go away my children alone,” he mentioned. “So we moved. And now we do not movie something in any respect.”

“It is a unusual world in the intervening time,” he mentioned. “So we’re taking our personal precautions — and on the subject of wallets, we’re now fully {hardware} wallet-less. We do not use any {hardware} wallets anymore.”

The household’s new system entails splitting a single 24-word bitcoin seed phrase — the cryptographic key that unlocks entry to their crypto holdings — into 4 units of six phrases, every saved in a distinct geographic location. Some are saved digitally by means of blockchain-based encryption platforms, whereas others are etched by hand into fireproof metal plates utilizing a hammer and letter punch, then hidden in bodily areas throughout 4 continents.

“Even when somebody finds 18 of the 24 phrases, they can not do something,” Taihuttu defined.

On high of that, he is added a layer of non-public encryption, swapping out choose phrases to throw off would-be attackers. The strategy is easy, however efficient.

“You solely want to recollect which of them you changed,” he mentioned.

A part of the explanation for ditching {hardware} wallets, Taihuttu mentioned, was a rising distrust of third-party gadgets. Considerations about backdoors and distant entry options — together with a controversial update by Ledger in 2023 — prompted the household to desert bodily {hardware} altogether in favor of encrypted paper and metal backups.

Whereas the household nonetheless holds some crypto in “scorching” wallets — for each day spending or to run their algorithmic buying and selling technique — these funds are protected by multi-signature approvals, which require a number of events to log out earlier than a transaction might be executed.

The Taihuttus use Secure — previously Gnosis Secure — for ether and different altcoins, and equally layered setups for bitcoin saved on centralized platforms like Bybit.

About 65% of the household’s crypto is locked in chilly storage throughout 4 continents — a decentralized system Taihuttu prefers to centralized vaults just like the Swiss Alps bunker utilized by Coinbase-owned Xapo. These amenities could supply bodily safety and inheritance providers, however Taihuttu mentioned they require an excessive amount of belief.

“What occurs if a kind of corporations goes bankrupt? Will I nonetheless have entry?” he mentioned. “You are placing your capital again in another person’s arms.”

As an alternative, Taihuttu holds his personal keys — hidden throughout the globe. He can high up the wallets remotely with new deposits, however accessing them would require at the very least one worldwide journey, relying on which fragments of the seed phrase are wanted. The funds, he added, are meant as a long-term pension to be accessed provided that bitcoin hits $1 million — a milestone he is focusing on for 2033.

The shift towards multiparty protections extends past simply multi-signature. Multi-party computation, or MPC, is gaining traction as a extra superior security mannequin.

As an alternative of storing personal keys in a single place — a vulnerability often called a “single level of compromise” — MPC splits a key into encrypted shares distributed throughout a number of events. Transactions can solely undergo when a threshold variety of these events approve, sharply decreasing the chance of theft or unauthorized entry.

Multi-signature wallets require a number of events to approve a transaction. MPC takes that additional by cryptographically splitting the personal key itself, guaranteeing that no single particular person ever holds the total key — not even their very own full share.

The shift comes amid renewed scrutiny of centralized crypto platforms like Coinbase, which not too long ago disclosed a data breach affecting tens of thousands of shoppers.

Taihuttu, for his half, says 80% of his buying and selling now occurs on decentralized exchanges like Apex — a peer-to-peer platform that permits customers to set purchase and promote orders with out relinquishing custody of their funds, marking a return to crypto’s authentic ethos.

Whereas he declined to disclose his complete holdings, Taihuttu did share his aim for the present bull cycle: a $100 million web value, with 60% nonetheless held in bitcoin. The remainder is a mixture of ether, layer-1 tokens like solana, link, sui, and a rising variety of AI and education-focused startups — together with his personal platform providing blockchain and life-skills programs for teenagers.

These days, he is additionally contemplating stepping again from the highlight.

“It is actually my ardour to create content material. It is actually what I like to do daily,” he mentioned. “But when it isn’t protected anymore for my daughters … I actually need to consider them.”

WATCH: ‘Bitcoin Family’ tracks moon cycles to make crypto investment decisions