Nobody predicted it. That is the whole point.
- The people who came through were not running better hardware
- What this changed for us
- The guide
- Where to start
On 30 July 2026, someone emptied hundreds of Bitcoin wallets in under an hour.
They did not phish anyone. They did not break into a house. A build-configuration error introduced in March 2021 had caused a hardware wallet’s seed generation to quietly fall back to a weak random number generator — so seeds that should have carried 128 bits of randomness carried, on the worst-affected devices, closer to 40. That is inside brute-force range. On 30 July somebody did the brute-forcing.
The defect sat in public, open-source firmware for five years, in the single most security-critical function a signing device performs. The audits did not catch it. The reproducible builds did not catch it. We did not catch it either — we rated that device in our cold-storage tier and recommended it, which is exactly why we are not going to be quiet about it.
Two things are true at once, and collapsing them helps nobody. A device bought today, running fixed firmware, generates a proper seed; the flaw is in seeds already created, not in every unit forever. And a five-year-old hole in seed generation is a serious mark against a maker.
But the part worth your attention is not the vendor at all.
The people who came through were not running better hardware
Every wallet drained on 30 July was single-signature with no passphrase.
The owners who were unaffected had not predicted this. Nobody predicted this. What they had done was combine something — a passphrase they chose that the device never saw, dice they rolled themselves, a key from a different maker in a multisig. Any one of those meant the flaw could not reach their coins on its own.
That is the whole argument, and it survives the specific incident completely:
You cannot defend against a threat you have not imagined. You can decline to own a component whose failure is total.
“The device generates it for you” is a single point of failure even when the device is a good one.
What this changed for us
We used to lead with choose the simplest setup that covers you. It is still on the site, it is still true, and complexity you do not fully control remains one of the largest causes of lost Bitcoin — more coins have been buried by clever schemes than taken by thieves.
What changed is which one wins when the two collide.
Nothing should depend on one thing being fine. Not one device, not one seed, not one manufacturer, not one clever idea you had at midnight. Where the simplest arrangement would leave a single thing holding everything, simplicity loses the argument.
Read the word independent carefully, because it is the one people mishear. This is not a push toward multisig. One seed plus a passphrase that device has never seen is two independent things and clears the bar. Three keys from the same manufacturer, made the same way in the same batch, do not — that is one thing bought three times, and one firmware defect reaches all of it at once. Count what has to fail, not how many pieces you own.
And it scales. What is entirely sensible for money you are learning with stops being sensible once the same arrangement is quietly carrying a decade of savings. The arrangement will not notice. You have to.
This is a judgement rather than a finding, and we would rather say so than have it inferred — careful people disagree with parts of it. Our reasoning is that most self-custody guidance was written for a world where attacks were expensive, hand-made and rare. They are now cheap, automated, and increasingly assembled by machines that read code faster and more patiently than any auditor. A shortcut that is merely risky today is the one found at scale tomorrow.
So the test we apply is not is this safe now. It is: is this still standing in ten years, operated by a real person having a bad week?
The guide
BitcoinKeys.guide is live, and it is a course before it is a set of tools — because security is something you learn and practise, and there is nothing you can buy that does it for you. No device, no service and no arrangement is safe on its own. What keeps Bitcoin is a person who understands their own setup and has rehearsed it at least once.
So the spine is 17 lessons across four levels, about an hour end to end, and nothing asks you to decide anything while you are still reading. The twelve rules come first and take two minutes; every lesson after that exists to explain one of them in full.
Then, when you are ready to decide: a finder that names the setup fitting what you are actually protecting against, a checklist to build it, and every hardware wallet we rate scored against a standard we published before any device met it.
What we promise, and what you can check:
- No device to sell. We make no hardware and take no affiliate commission on any of it. That is not a virtue claim — it is the mechanism that lets the comparison say a device is worse than another device.
- No keys held. Not a wallet, not a custody service, not an app that holds anything.
- Bitcoin only. No altcoins, no yield, no DeFi. Those are not self-custody.
- Nothing logged. No analytics, no trackers, no cookies. Anything you save stays in your own browser. We do not know you were here.
- Dated in the open. Every page carries the date its guidance was last checked, and the dates that cover fast-moving things — prices, vendor pages, firmware advisories — are moved by a machine that re-reads the source, so a stamp cannot run ahead of its evidence.
The finder never asks how much Bitcoin you hold. Nothing on the site does, and nothing ever will. It asks what losing it would do to you, because consequence is what should set the shape of a setup — and it is the version of the question you can answer honestly to a website.
Where to start
Go and count what has to fail in your own setup. Not how many devices, not how many words — how many separate things would have to go wrong before your Bitcoin is gone. Do it honestly, today.
Most people doing that for the first time find the answer is one. If that is you, it is usually a smaller job to fix than it looks.
The twelve rules are one sentence each:
Write a comment