METE HAN

[METE HAN @ErkotTe]

@20x20xi Hello @20x20xi
,In a recent wallet privacy test, Cake Wallet had 0 IP exposure on launch while Ledger ranked lower. Why does Ledger Live connect to multiple domains/IPs before setup? Any plans to improve initial privacy?Thanks
https://t.co/nXFZM7cIcu

[Cake Wallet @cakewallet]

Really appreciate @Nick_Researcher for putting together such a thoughtful comparison of crypto wallets based on privacy.

We’re honored to see Cake Wallet ranked at the top! 🙏

[METE HAN @ErkotTe]

@elonmusk Merhaba sayın elon mask marsa ilk insanli yolculuk nezaman

[METE HAN @ErkotTe]

@moonpay 10 btc

[METE HAN @ErkotTe]

@BaycuNoyan313 Sahte mi

https://t.co/gurEjDdbOv

[baycnunoyan @BaycnNoyan313]

8 ay önce ABD nin İran'ı vuracağını bil

7 ay önce takipçilerini full nakite geçir

Şubatta ki çöküşü bil

#btc 73 den 48 düştüğünde 48 dip olduğunu bil

Trumpun geldikte piyasalara kan ağlatacagini bil

böyle yüzlerce öngörü..

Şimdide diyorum ki akümüle dönemine hoşgeldiniz

[METE HAN @ErkotTe]

@FatihHoca0 Hoca 54 son mu

[METE HAN @ErkotTe]

@20x20xi If the issue stemmed from the VPN, all wallets subjected to the same test would have leaked the IP address. However, while two software wallets successfully masked the IP address, Ledger leaked it. The problem lies not with the VPN, but with Ledger's routing system.

[METE HAN @ErkotTe]

@20x20xi According to the Wallet Privacy Scorecard, Ledger scores a low 64/100, exposing 10 IPs and 14 domains on first launch. Don't blame the VPN. Software wallets like Cake or Stack achieve a perfect 100/100 with 0 exposure. Why is Ledger Live leaking this much data by design?

[METE HAN @ErkotTe]

@BaycuNoyan313 Bazı Cüzdanlarda ip sızıntısı oldugu söyleniyo

https://t.co/OdeTEMazK1

[Nick Research @Nick_Researcher]

➥ crypto wallet IP-exposure scorecard

my main wallet GOT DRAINED yesterday, so i spent hours checking safer wallets to move on

the Open Source Press recently analyzed the network traffic of popular Web3 wallets

to identify how much info leaves your device before you even create a wallet

the setup was intentionally simple:
- clean Android device
- no SIM card
- fresh APK installation
- VPN enabled
- every packet logged from the moment the wallet was opened

the user never created a wallet, imported a seed phrase & connected an account

the only thing measured was what each wallet sent to the internet immediately after launch

how the privacy score works?
- the score ranges from 0 - 100
- a higher score means less network exposure

the ranking is based on 2 simple metrics:
→ number of unique IP addresses contacted
→ number of unique domains contacted

fewer outbound connections = fewer parties learning your IP address + device info before you even own a wallet

privacy ranking post-filtered:

[1] Top Tier (90-100)
@cakewallet
@stack_wallet
@zodl_app
@Trezor
@vultisig
@unstoppablebyhs
@ZeusLN
@phantom
@tetherwallet
@bluewalletio
@zano_project

[2] Middle Tier (70-89)
@exodus
@AtomicWallet
@Thorwallet
@keplrwallet
@TrustWallet
@safe
@Rabby_io
@rainbowdotme
@Backpack
@EdgeWallet

[3] Lower Tier (<70)
@Ledger
@MetaMask
@base wallet
@solflare
@Cryptocom wallet
@Tangem
@wallet
@SafePal

the differences are significant as bellow

- Cake Wallet generated 0 outbound packets, 0 DNS requests, contacted 0 domains before user interaction

- Zodl contacted just 1 endpoint

- Unstoppable contacted only 2 endpoints

- Phantom routed third-party services through its own infra, reducing direct exposure to external vendors

at the other end:

- SafePal contacted 26 domains across 41 IP addresses immediately after launch
- OKX Wallet initialized AppsFlyer, Amplitude, OneSignal, ThreatMetrix fingerprinting, Alibaba endpoints, and other services before a wallet even existed

many mainstream wallets also initialize analytics, attribution, crash reporting

or messaging platforms such as Firebase, AppsFlyer, Segment, Braze, Customerio, Sentry, Crashlytics, Amplitude during cold start

that doesn't automatically make them insecure

these services help teams improve products, diagnose crashes, and measure usage

but they also mean your IP address + device can be visible to multiple third parties before you generate your first private key

for anyone who values network privacy, that's an important distinction

onchain privacy starts with the wallet you choose

but network privacy starts the moment you open the app

s/o to @r4nk0X for the great insights

[METE HAN @ErkotTe]

@Nick_Researcher @vikrantnyc @cakewallet Yazılım cüzdanları donanım cüzdana göre daha fazla risk li degil mi

[METE HAN @ErkotTe]

@20x20xi Hello @20x20xi
,In a recent wallet privacy test, Cake Wallet had 0 IP exposure on launch while Ledger ranked lower. Why does Ledger Live connect to multiple domains/IPs before setup? Any plans to improve initial privacy?Thanks
https://t.co/nXFZM7cIcu

[Cake Wallet @cakewallet]

Really appreciate @Nick_Researcher for putting together such a thoughtful comparison of crypto wallets based on privacy.

We’re honored to see Cake Wallet ranked at the top! 🙏

[METE HAN @ErkotTe]

@Nick_Researcher @cakewallet Merhaba sayın @Nick_Researcher ledger nano s [android/pc/] kullanımında sakınca var mı

[METE HAN @ErkotTe]

@Ledger @moonpay https://t.co/OdeTEMazK1

Bu araştırmayla ilgili görüşünüz nedir

[Nick Research @Nick_Researcher]

➥ crypto wallet IP-exposure scorecard

my main wallet GOT DRAINED yesterday, so i spent hours checking safer wallets to move on

the Open Source Press recently analyzed the network traffic of popular Web3 wallets

to identify how much info leaves your device before you even create a wallet

the setup was intentionally simple:
- clean Android device
- no SIM card
- fresh APK installation
- VPN enabled
- every packet logged from the moment the wallet was opened

the user never created a wallet, imported a seed phrase & connected an account

the only thing measured was what each wallet sent to the internet immediately after launch

how the privacy score works?
- the score ranges from 0 - 100
- a higher score means less network exposure

the ranking is based on 2 simple metrics:
→ number of unique IP addresses contacted
→ number of unique domains contacted

fewer outbound connections = fewer parties learning your IP address + device info before you even own a wallet

privacy ranking post-filtered:

[1] Top Tier (90-100)
@cakewallet
@stack_wallet
@zodl_app
@Trezor
@vultisig
@unstoppablebyhs
@ZeusLN
@phantom
@tetherwallet
@bluewalletio
@zano_project

[2] Middle Tier (70-89)
@exodus
@AtomicWallet
@Thorwallet
@keplrwallet
@TrustWallet
@safe
@Rabby_io
@rainbowdotme
@Backpack
@EdgeWallet

[3] Lower Tier (<70)
@Ledger
@MetaMask
@base wallet
@solflare
@Cryptocom wallet
@Tangem
@wallet
@SafePal

the differences are significant as bellow

- Cake Wallet generated 0 outbound packets, 0 DNS requests, contacted 0 domains before user interaction

- Zodl contacted just 1 endpoint

- Unstoppable contacted only 2 endpoints

- Phantom routed third-party services through its own infra, reducing direct exposure to external vendors

at the other end:

- SafePal contacted 26 domains across 41 IP addresses immediately after launch
- OKX Wallet initialized AppsFlyer, Amplitude, OneSignal, ThreatMetrix fingerprinting, Alibaba endpoints, and other services before a wallet even existed

many mainstream wallets also initialize analytics, attribution, crash reporting

or messaging platforms such as Firebase, AppsFlyer, Segment, Braze, Customerio, Sentry, Crashlytics, Amplitude during cold start

that doesn't automatically make them insecure

these services help teams improve products, diagnose crashes, and measure usage

but they also mean your IP address + device can be visible to multiple third parties before you generate your first private key

for anyone who values network privacy, that's an important distinction

onchain privacy starts with the wallet you choose

but network privacy starts the moment you open the app

s/o to @r4nk0X for the great insights

[METE HAN @ErkotTe]

@Nick_Researcher @Ledger
Bu araştırmaya ilişkin görüşünüz nedir

[METE HAN @ErkotTe]

@Gemini Slm gemini

[METE HAN @ErkotTe]

@Ledger Ledger good 👍👍 @david_lmaz @Enki277006

[METE HAN @ErkotTe]

@Proton_Pass Hiç biri

[METE HAN @ErkotTe]

@Ledger Merhaba
ledger 1 tane donanim cüzdani hediye eder misiniz pahalı birşey istemem 👍

[METE HAN @ErkotTe]

@ProtonMail Ücretsiz gibi ücreti çok düşürün
Ki kullansın herkes

Ücretsiz 5gb mail verin/ 1gb diye üyelik var ama 500mb alan veriyorsunuz ayrıca sürekli reklam vb geliyo