Take Bitcoin savings seriously with simple multisig. Stay Frosty.
Onchain
- Tweets 289
- Following 1,662
- Followers 4,464
- Likes 913
Frostsnap ❄ retweeted
Boarding the @secondhq Ark from Frostsnap [Signet]
Move directly from your @FrostsnapTech onchain to a Bark balance for lightning payments ⚡️. "hand-signed" with physical devices.
Board TX: mempool.space/signet/tx/f2c4…
3
11
45
5,021
Home invasions are the fastest growing attack type, and one country accounts for most of them. @LLFOURN analyses the situation:
BTC Prague
4
6
19
1,309
Multisig that looks like single-sig onchain. The threshold lives between your devices.
@BTCsessions has put more hardware wallets to the test than anyone. Seeing him set up a Frostsnap multisig without any descriptor backup to lose means a lot to us. Thanks for the deep dive ☃️
What the hell is FROST?
• Multisig-style security, NO config file needed!
• Looks like (and is) single-sig on-chain
• Easiest distributed setup I've seen
New video on @SOVsessions w/ @FrostsnapTech:
piped.video/ufT5a2NsADY
2
9
61
4,772
Frostsnap ❄ retweeted
Can't wait to see your video about Frostsnap. I have been experimenting with the devices myself and I love them :-)
1
1
3
514
Much of the Coldcard theft story is sums and totals. It's the individual stories that are brutal. Check out @LLFOURN's analysis of the attack
A sad story. After the main coldcark attack had been exhausted this person was trying to save their coldcard infested multisig. They swapt their multisig to their day-to-day single sig wallet. Little did they know their single sig was also vulnerable -- in fact it had already had funds taken from it. Due to a tragic technical issue most of the funds were missed by the first round of the attack so they didn't notice. A day later the 6.8 BTC was taken. Oof.
1
11
2,570
Frostsnap ❄ retweeted
What is downgrade protection?
Frostsnap has Secure Boot, which only runs firmware signed by us. Attackers cannot load their own malicious firmware into your devices.
They could try to get around it by loading older signed firmware that has known weaknesses...
Frostsnap v0.4.0 is out ❄
It fixes two security issues. We know of no user funds lost to either, and each has a published report. Update your app and device firmware.
Also: firmware downgrade protection and dozens more fixes.
frostsnap.com/security/updat…
3
6
42
3,930
Frostsnap ❄ retweeted
I was familiar with @LLFOURN and the rest of the @FrostsnapTech team for years, but the past few weeks have blown me away with the thought they have put into self custody security ecosystem.
Loading this up now while I work, reccomend giving it a listen and giving a follow to @utxoclub and @sakak_musdom from the frost snap team.
Moving your bitcoin off an exchange doesn't magically eliminate third-party risk. In fact, Lloyd Fournier argues in this clip from Chat 177 that your hardware wallet is just another trusted third party hiding in plain sight. It's a reality check about how we generate our keys.
Are you still relying on a single piece of hardware? Hear our discussion on why 'Not Your Keys' just isn't enough anymore.
7
18
114
16,752
Each issue has a bulletin and a technical report: what it was, when it entered the codebase, and the commits that fixed it.
We routinely run AI-assisted audits across our code and systems, alongside ordinary review.
1
4
358
To update: download the latest Frostsnap app (from a genuine source!), plug in each device, and follow the firmware upgrade prompt.
Deterministic Firmware Digest 🔍
037c345c9db9866d30e219ae56de5efe3905a4050a82df362590d5017e709df0
1
1
5
511
A user found and reported the change-address bug. On behalf of all Frostsnap users and the team: thank you, and sorry for the worry. The coins were never gone, just past the range a fresh wallet scans; v0.4.0 finds and consolidates them.
We found the other one ourselves.
1
9
357
Second: change from a payment could land deep in the wallet's keychain, outside the range that wallet recovery scans. A wallet restored from backup would appear to be missing funds that are still safely in the wallet.
frostsnap.com/security/updat…
1
1
7
465
Frostsnap v0.4.0 is out ❄
It fixes two security issues. We know of no user funds lost to either, and each has a published report. Update your app and device firmware.
Also: firmware downgrade protection and dozens more fixes.
frostsnap.com/security/updat…
8
20
96
16,153
First: a malicious signing request could mark an output as belonging to your own wallet. The device did not verify that claim, and left the output off its confirmation screen. A malicious app could send funds somewhere you were never shown.
frostsnap.com/security/updat…
1
1
9
914
@FrostsnapTech has a special place in my heart. Im not satisfied with the current multivendor multisig drooling craze. Most other signers dissapoint me. I prefer to strive for something better, a leap in the right direction 🫶❄️ #FROSTMAXXING
4
3
12
1,023
Frostsnap ❄ retweeted
“Smart people make mistakes under pressure” 🎯
Scammers get you to believe there is real pressure because <reason>
No meaningful amount of your stack should be able to be moved quickly
Now think, how quickly could your main stack move, and should that change?🤔
One of our friends lost all his bitcoin last night.
Social engineering. Convincing story had him panicking. He made all the mistakes. Smart people make mistakes under pressure.
Choose a custody arrangement that protects you from the MOST COMMON WAY PEOPLE REALLY LOSE BTC.
1
2
11
1,049
