Introducing KYVORA Earlybird, our first community campaign.
Join the waitlist, complete social tasks, earn KYVORA points, and climb the leaderboard.
Earlybird is coming soon. Here's how it will work. ↓
@Judaixxspexxy Not ours, KYVORA is still in development. It's built into Bitcoin script, and Liana is one wallet that sets up timelocked recovery paths. On ETH, smart accounts like Safe can add a recovery module with a delay, but it's far less common.
@theVishSarvaiya Depends on the chains you use, but look for one that shows the full address and what you're approving before you sign, and keep the seed offline. We're building KYVORA around that, still in development https://t.co/N3XrRZ6iqS
@sprunky_eth A Permit costs nothing to sign and shows no transaction, yet it lets the spender move your tokens later without another prompt. A "claim" that only asks for a signature deserves a second look for that reason.
@CheekyCrypto Both incidents hit the edges, not the keys. Electrum needed a malicious server during a fee bump and Keystone leaked shipping records, so the risk is moving to the moments where someone has to check an address or doubt a message.
@ivygalindo Multivendor multisig is where people can end up, not where they have to start. A single-sig wallet with a written seed and one test restore is a much smaller first step, and it still means holding your own keys.
In fact, we are building KYVORA Wallet because most major wallets have been ignoring cases like this. They usually ignore it and pretend it's the user's fault, but it can be fixed just by adding a little UX friction for every user. We noticed most wallets nowadays focus on removing friction to the point that the most important details get lost, so we're building the opposite.
The KYVORA Extension is in Phase 1 testing.
It's part of the self-custody wallet we're building, and we're working through it in stages.
Join the waitlist to hear what's next: https://t.co/N3XrRZ6iqS
@CryptoSafuHQ The fake replacement only matched the last four characters of the real recipient, so reading the whole address on the fee-bump confirmation would have caught it. Connecting Electrum to your own server avoided the issue entirely.
@untanglebitcoin The weak spot is where the keywords get created. If that phone or laptop has malware, the seed is exposed from day one, and spending later means typing it back into an online device, which is the step a hardware wallet removes.
@carson_trust The hard part with phones is recovery. A key kept in the phone's secure chip can't be copied out by design, so the backup ends up in a cloud account or on paper, and that backup is what you're really trusting.
@BoogleSamey The fiftieth is the one address poisoners wait for. The scam only works once someone stops checking and copies the latest address straight out of their transaction history.
@AlfredTrybe Worth adding that what people share is usually the address, which wallets derive from the public key. The seed phrase belongs in the never-share column too, because it can recreate the private key.
@jonsnowvynx For just holding, most people go with a hardware wallet and write the seed on paper, kept offline. KYVORA is a self-custody wallet we're still building, so it isn't usable yet, but you can follow along here https://t.co/N3XrRZ5KBk
@marc02200 I'd write the seed down instead of relying on memory. Memory slips over the years, and one wrong or missing word can lock you out for good, while a paper or metal copy kept offline stays the same.
@sunnymaanz@phantom Trending lists are also where copycat tickers show up, so a first buy is a good moment to show them how to check the token's contract or mint address. Two coins can share the same ticker.
@C0deCanvas Probably a bit of both. Opening a bad link rarely drains anyone by itself. It's the approval or signature you click through afterwards that does it.