Crypto investors lose sleep over stolen physical addresses
12 posts across 2 communities in the last 90 days; 92% from r/CryptoCurrency.
“Yea there is nothing wrong w their wallets , third party email systems and mailing systems are just shit databases that can easily get hacked while seed phrases with proper entropy cannot”
“People asked Trezor if devices shipped from HQ were safe and Trezor couldn’t even give them a straight answer because they use(d) the same reseller. Time to lock in and grind more hours on seedsigner [re: Trader Loses $6.6 Million in Bitcoin After Buying New Ledger Wallet]”
“Yeah we went through the same hoops, alot of alerts needed changed. Such a seemingly unnecessary signature change too.”
Users report their physical addresses being stolen and misused, particularly in the context of crypto wallet breaches (e.g., Trezor). Concerns focus on privacy violations and the lack of recourse to protect personal information.
SOURCES (20)
“People asked Trezor if devices shipped from HQ were safe and Trezor couldn’t even give them a straight answer because they use(d) the same reseller. Time to lock in and grind more hours on seedsigner [re: Trader Loses $6.6 Million in Bitcoin After Buying New…”
“Yeah we went through the same hoops, alot of alerts needed changed. Such a seemingly unnecessary signature change too.”
“There isn’t. Other than probably the country or city I am from but that’s about it. And yes I’m from a major metropolitan city so good luck.”
“the difference here is that the group was able to create fake LBTCs token, initiate a pegout and 11 of 15 federated nodes signed the transaction as legitimate. Your trezor hack attempt requires user specific attack or some major malware infection, which already happens all the time.”
“? Just recently liquid network got abused by some code abuse, no need for phishing attacks when there is just 1 small thing somewhere to get abused that isn't discovered yet.”
“Yea there is nothing wrong w their wallets , third party email systems and mailing systems are just shit databases that can easily get hacked while seed phrases with proper entropy cannot”
“the domain being the real one is what makes this so insidious, most people's mental checklist ends at "verified sender" and they're done”
“Trezor's third-party email provider got breached, and whoever did it used it to send phishing mail out from Trezor's actual domain with the subject line "Critical Security Alert: STM32 Entropy Vulnerability." Worked so well mainly because of the fresh ptsd people still have from Coldcard's real entropy bug that resulted in the huge exploit. I'm seeing people lump this in with a broader "hardware wallets aren't safe anymore" narrative and that's not rea”
“I agree. There is nothing here or anywhere else that indicates a government made a crypto project though.”
“Second one this week - Trezor was first in line. Seems that targeting physical orders - the same attack vector as was the case with Trezor Bearish on hardware wallets? submitted by /u/SpurdoSparde28 [link] [comments]”
“You dont have a safety deposit box? Its like 50$ a year... Just keeping all your crypto under your matress with a ball bat as defense?”