Rodolfo Novak, Coldcard scammer: "I will take it".

"If quacks like a duck, then it probably is a duck."

If Hardware Wallet vendors doing gross negligence do not get into the category of criminal fraud when they do not have certifications and code quality security and security in depth design, then anyone will just jump into space "selling lots of hardware" and doing exit by simply blaming "the hacker".

If an idiot scumbag wallet vendor gets angry when you question his shit, now you know what could be the end result.

______

"The threat of a malicious manufacturer might seem small, but when it comes to companies that might go out of business in the next decade, the possibility of pulling an "exit scam" should not be discounted. The fact that this attack is virtually impossible to prove as a victim could provide additional motivation for malicious actors." (10 Nov 2022)

https://blog.bitbox.swiss/en/how-almost-all-hardware-wallets-can-steal-your-seed/

https://gitlab.com/walletscrutiny/walletScrutinyCom/-/work_items/340

For the record. Bitbox, Coldcard, Trezor, Ledger, Bitkey, Jade. Central point applies to all the HWs, the fucking article is just to show the warnings there were out there, fucking do not trust neither on Bitbox or whatever shit even if they tell you they are ultra secure, etc, the focus point is make more aggressive accountability on Hardware Wallet vendors in general.

Hardware Wallet manufacturing for commercial sale should be treated as a regulated, not something anyone (any idiot with an idea) can ship without independent security certification.

Vendors handling other people's life savings should face defense in depth certification requirements, with real liability, including criminal liability for gross negligence when they don't meet them.

Related articles regarding self-custody that need to be reexplored by Bitcoin community (tech oriented), Bitcoin needs to level up on self custody.

https://www.turnkeylinux.org/blog/secure-bitcoin-transactions

https://nakamotoinstitute.org/library/trusted-third-parties/

https://nakamotoinstitute.org/mempool/bitcoins-rugged-individualism/