Extracting Seeds from Hardware Wallets
summary
Hardware wallets in multiple designs reveal practical, reproducible attacks: an "air‑gapped" Le Pal device exposes an unlocked MediaTek bootloader and unencrypted filesystem, firmware keys recoverable after dumping external flash and DES key brute‑force with hashcat (~1 week on GPU); open‑source devices leak seeds via low‑cost side‑channel and implementation flaws allowing a $100 black box extractor to recover seed and PIN in 1–3 minutes; responsible disclosure prompts vendor patches and bounty programs.
AI-written summary · about
chapters (5)
related talks
43mThe Misuse Of Secure Components In Hardware Wallets
43mHWW: Challenges 10 Years After
18mEngineering a backdoored bitcoin wallet
29mSecurity of Cryptocurrency wallets/mining
25mMINimum Failure - Stealing Bitcoins with Electromagnetic Fault Injection
18mThe Future of Crypto Wallets: Trends and Innovations
28mThe Coldcard Exploit What Happened & Why Bitcoin is Stronger Than Ever
36mOpen Sesame - Or How Secure Is Your Stuff In Electronic Lockers