COIN BASED: The Ledger Hack (w/ Marty Bent & Rob Hamilton)

<p>Welcome back to Coin Based, our live Bitcoin discussion series! Live from PubKey NYC, <a href="https://x.com/arbedout" target="_blank" rel="ugc noopener noreferrer">ArbedOut</a> is playing host this week, with <a href="https://x.com/MartyBent" target="_blank" rel="ugc noopener noreferrer">Marty Bent</a> (Founder, <a href="https://x.com/TFTC21" target="_blank" rel="noopener noreferer">TFTC</a>) in the room and <a href="https://x.com/Rob1Ham" target="_blank" rel="ugc noopener noreferrer">Rob Hamilton</a> (CEO, <a href="https://x.com/AnchorWatch" target="_blank" rel="ugc noopener noreferrer">AnchorWatch</a>) beaming in.</p><p><br></p><p>Two months after Coldcard, there&#39;s another hardware wallet hack to unpack: the Ledger reseller attack. They cover how tampered Ledgers with a SIM card and modem inside got into the supply chain, the $101 million drained from 342 wallets, how Coldcard and Ledger botched their crisis response, and whether Bitcoin needs an Apple to build hardware wallets. </p><p><br></p><p>0:00 INTRO: Welcome back to Coin Based!<br>2:16 How the Ledger hack unfolded: a reseller sold to China, and Mark Karpelès takes one apart <br>7:32 $101 million stolen from 342 wallets <br>11:54 What could victims have done differently?<br>14:11 Why no multisig wallet got drained (and what if all your Ledgers were tampered?) <br>16:19 Would covenants have stopped this? (letting your wallet refuse unknown addresses) <br>21:12 Security has to be on by default (the WhatsApp encryption problem) <br>27:21 How much Bitcoin before you need multisig? Rob&#39;s rule of thumb <br>28:39 Supply-chain risk: who do you trust before Ledger? Foxconn, chip makers and the Bitmain backdoor <br>32:34 Does open-source hardware fix this? <br>38:15 Should you build your own wallet? SeedSigner and air-gapped laptops <br>44:50 Grading Coldcard and Ledger&#39;s crisis response <br>50:43 Does Bitcoin need an Apple to build hardware wallets? <br>56:19 The Mark Karpelès redemption arc, and how far attackers have come since Mt. Gox <br>1:04:05 Should you auto-update everything now that AI is hunting bugs? <br>1:12:35 CONCLUSION: Pandora&#39;s box is open. </p><p><br></p><p>▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ </p><p><br></p><p>Welcome back to the Internet&#39;s dive bar. We&#39;re located in New York City and Washington DC. (With more locations coming!) <br>We host FREE &amp; OPEN TO THE PUBLIC events for the curious, the rebellious, and the orange-pilled. </p><p><br></p><p>Visit PubKey: </p><p><br>