Oddbean new post about login | logout ‘Dark Skippy’ method can steal Bitcoin hardware wallet keys. Malicious firmware can embed secret data into a public Bitcoin transaction, which the attacker can then use to extract a person’s seed words. https://yakihonne.s3.ap-east-1.amazonaws.com/89f93336152fbe149c10445b7e780339e16f9ed7ceeb1596414c65c2779b7582/files/1723168312699-YAKIHONNES3.webp
The Dark Skippy method can be executed even if the victim has only posted a couple of transactions to the blockchain. It can also be performed even if the user relies on a separate device to generate seed words . The attack involves embedding the master secret seed within transaction signatures, allowing the attacker to exfiltrate the entire wallet's seed words
hdhdd
