18.08.2026 13:10
Ledger CEO Pascal Gauthier mentioned the crypto trade ought to cease attempting to clear up safety by putting extra duty on the person. In accordance to Gauthier, there isn’t any such factor as “good safety,” and {hardware} pockets producers want to design methods that stay safe even when folks make errors.
Gauthier acknowledged that the trade has lengthy handled safety as a matter depending on person consideration. In accordance to the CEO, this method is flawed as a result of nobody can behave completely sufficient to foresee each type of technical malfunction. Gauthier argued that producers ought to develop designs that shield belongings even when customers make a misstep.
The Ledger government additionally argued that self-custody would stay restricted so long as peculiar customers are anticipated to perceive each type of technical malfunction. The CEO emphasised that customers mustn’t blindly belief producers’ safety claims. Gauthier mentioned, “No design, together with ours, must be accepted solely on the phrase of its producer.” Gauthier described safety as a course of requiring steady testing and enchancment.
COLDCARD LOSS REACHES 1596 BTC
Gauthier’s remarks got here after two incidents that successively shook the {hardware} pockets ecosystem. In a warning revealed on July 30 and up to date on August 14, Coldcard producer Coinkite disclosed a randomness flaw in restoration phrases generated with particular firmware of the Mk2, Mk3, Mk4, Mk5, and Q fashions. The corporate acknowledged that funds protected by affected phrases might be in danger.
In accordance to Galaxy Analysis’s preliminary account dated July 31, the loss exceeded 1000 BTC. On August 4, the group reported that 1596 BTC had been stolen in three verified waves of assaults linked to roughly 7,300 addresses and 14 smaller incidents. It famous that if a fourth, as-yet-unverified wave have been included, the full may rise to 2055 BTC. In accordance to Gauthier, in such a scenario, person warning is just not sufficient, as a result of self-discipline can not change a flawed design.
Following the Coldcard incident, Trezor additionally introduced an information breach at its logistics supplier ShipMonk on August 13. The breach compromised the private info of 13,689 clients in seven international locations. Of those, the names, emails, cellphone numbers, and supply addresses of 11,742 have been obtained. The names, cities, and emails of the remaining 1,947 clients have been affected. Trezor acknowledged that its personal methods and gadgets weren’t breached.
The Coldcard and Trezor incidents have reopened the controversy on product safety and the safety of person knowledge in {hardware} wallets.
