Stadicus

Bitcoin minimalist
Not the expert at @BitBoxSwiss
⚡ [email protected]

1907c92a96deaca8830b533fe0974e08ffa8e69ce51d8d53268ff9cd2b6c27af

[Stadicus @Stadicus3000]

If you care about #Bitcoin you should run your own full node.

There are great plug & play options available, but if you want to learn how your node actually works, and have some geeky fun along the way, the @RaspiBolt guide might be for you!

https://t.co/a6lut93PvU

[BitBox @BitBoxSwiss]

Things I was sure were in the whitepaper but none of them are 👀

Happy Bitcoin white paper day, it’s eighteen today!

[Blocktrainer @blocktrainer]

LIGHTNING und SELBSTVERWAHRUNG - Markus Vorsmann (@BitBoxSwiss) | Blocktrainer Event 2026

Mit der neuen Lightning-Integration verbindet BitBox schnelle Bitcoin-Zahlungen mit Selbstverwahrung! Jetzt in der BitBox-App! ⚡

Mehr dazu im Video!
👇
https://t.co/bIxgcp3xRe

[Christian Moss @MandelDuck]

David Attenborough: Bitcoiners in the wild 🦍🟠₿

In this film, we follow one of the most fascinating and least understood species on planet Earth… the Bitcoiner

If you enjoyed this, a like and repost. Follow for more Bitcoin comedy 🧡

[BitBox @BitBoxSwiss]

We'll be speaking at @bitcoinconfams on Nov 5–6, so we've got passes to hand out.

Reply with why you want to go. 5 winners on Oct 28.

We'll DM you.

[BitBox @BitBoxSwiss]

Your reminder that a hardware wallet needs its own screen.

Here’s why 👇

https://t.co/HpwDWhWj4E

[Jameson Lopp @lopp]

🚨DEFCON 1🚨
In a few hours, a critical vulnerability that affects ~70% of web sites will be disclosed. It allows an attacker to upload and execute arbitrary code.

It's probably best if you stop browsing the internet for the rest of the week.
https://t.co/LxgLOhP8qO

[HalesFall 🪽 @HalesFall]

Tangem appeals to the lowest common denominator in crypto, that's why it's filled with bagholders from $XRP $KAS and affiliates paid peanuts to shill.

I will make it simple for people to understand today.

In December 2024, @Tangem had a critical vulnerability where its mobile app wrote users' PRIVATE KEYS into logs that got attached to support emails. They deleted early warning posts on Reddit.

Inb4 "muh seedless, muh safe", yes, your keys never touch the app. Your TRANSACTIONS touch it every single time. The attack vector is the APP ITSELF and the OS it runs on. Read on.

Tangem's Nirvana Fallacy is: seatbelts have occasionally failed, therefore remove seatbelts.

Ledger/Trezor clear-signing bug: worst case, the screen lies about transaction parameters.

Tangem's design: the (phone) screen can lie about transactions as the permanent baseline.

>"Hardware Implant"

Physical implants predate Bitcoin. They are device agnostic. The phone on which Tangem's app runs could have an implant too, what then?

"Tangem Genuine Check" was exploited by Ledger already. Counterfeit Tangem Cards are not just theoretical:

https://t.co/aE5cH5doHp

>"Clear Signing Bugs"

Clear-signing bugs are a failure of a layer Tangem doesn't have at all. Tangem signs whatever payload the app hands it, every time, by design.

Car airbags have defects, even from Toyota, the most reliable car manufacturer that exists. Tangem's solution is to remove airbags altogether.

Both Ledger and Trezor vulnerabilities are routinely patched.

You can never patch your laser vector:

https://t.co/V3irWh1iad

Or tearing vector:

https://t.co/cHTCtG8XT4

...because there's no update channel for users.

Your security page still advertises resistance to "fault injection attempts". Donjon's laser attack IS fault injection. It works and it's unpatchable by you.

[Eureka Moment]

@Ledger and @Trezor clear signing bugs were discoverable BECAUSE the trusted display can be audited against what it signs.

In Tangem's model, there's nothing to audit. Read that back slowly because it's easy to miss. It's evidence the architecture is testable.

Ledger/Trezor is like bank that publishes audited accounts. It will occasionally have an auditor find an error:

1. Construct a transaction.
2. Record what the device displays.
3. Record what the device actually signs (the signature reveals exactly what was signed).
4. Compare the two.

Tangem is a bank that keeps no books. Therefore it will never have an accounting error found:

1. Construct a transaction.
2. Record what the app displays.
3. Record what the card signs.
4. They differ: the app showed one address, the card signed another.

In Tangem's case, there's no vulnerability because Tangem never promised those two things should match. The card signs whatever payload the app hands it. The system is working exactly as designed. It's the default behavior for a compromised OS.

>"And more hardware components can introduce more attack vectors."

So your solution to a purpose-built trusted display driven by minimal firmware (Ledger/Trezor) is a whole ass smartphone, running a full OS, with millions of lines of code and attack vectors.

Genius.

>"muh security hardened app"

You never replied to my original post here because you can't:

https://t.co/26LH9FTKUb

Tangem was also audited by Riscure in 2023, yet you still got smoked by Ledger later:

https://t.co/M5J2pk6Bq8

Not even Apple or Google can defend an app from a kernel-level exploit on their own OS, that's why Ledger/Trezor don't try. They verify OUTSIDE the blast radius. Your "hardened app" lives inside it.

[Latest Exploits]

See the videos attached, there's tons more I haven't included. You have neither the money, resources, or expertise to defend from OS exploits. How many of your users are even using Pixel 8 series and later, or iPhone 17 series and later? That matters greatly too.

Your "app" layer is dead-on-arrival. Ledger & Trezor provide mitigation where you cannot.

Tangem is more akin to a software wallet because it implicitly trusts a compromised OS. The secure element is theatre since the card will sign anything passed to it.

[Stadicus @Stadicus3000]

To be clear: with Tangem, the full security of your wallet depends on your mobile phone. The card is just signing everything blindly.

Shame on them for their dishonest marketing. Don't be fooled.

[Coinjoined Chris ⚡ @coinjoined]

The last thing we need is competitors dunking on @ledger to score cheap marketing points.

If retirement attacks are possible, this threatens all of self-custody.
Today it's your competitor. Tomorrow it could be you.

[Zach Herbert 🇺🇸 @zherbert]

This is toxic and disingenuous. Tangem is misleading so many folks who don’t know better.

Gaslighting the industry for years.

Blind signing has a clear definition. This product is a glorified 2FA hot wallet and doesn’t protect from the most simple type of attack: a compromised phone or computer.

[BitBox @BitBoxSwiss]

1/ How does a hardware wallet actually generate a Bitcoin wallet? 🔐

It all starts with entropy: randomness that makes your wallet extremely hard to guess.

Here’s how BitBox generates yours.

[BTC Sessions 😎 @BTCsessions]

I just tried the @BitBoxSwiss 02 Nova.
This may be the first hardware I've tested that includes a lightning wallet.

So how does it work? Well you can watch here to find out.

https://t.co/QaOKjNw33g

[Stadicus @Stadicus3000]

@HodlDee @Coinkite @COLDCARDwallet Mad respect for holding the fort!

[Bitcoin verstehen @BTCVerstehenPod]

BitBox02 Nova Schritt für Schritt einrichten!

Wir zeigen euch in unserem neuen Video, wie ihr die #Bitcoin Hardwarewallet von @BitBoxSwiss einrichtet, Sicherungen erstellt und dann Transaktionen sendet sowie empfangt.

👉 https://t.co/LbRDtEiuS4

[Stadicus @Stadicus3000]

2000+ Trustpilot reviews, rated Excellent with 4.9 stars, doesn't come easy. https://t.co/dbKcoTz2tC

[BitBox @BitBoxSwiss]

No bots in our customer support. Just humans who know your BitBox.

[Stadicus @Stadicus3000]

That's a pretty good summary. 🇨🇭

[Elisa Mosini 🇪🇺🇮🇹 @MosiniElisa]

Swiss voters crushed a far-right initiative by over 70%.

The referendum aimed to lock stricter neutrality into the constitution.

This would have banned Swiss sanctions aligned with the EU against Russia for the invasion of Ukraine.

Switzerland stands with the free world
🇨🇭🇪🇺🇺🇦

[BitBox @BitBoxSwiss]

Two booths, two countries!

Markus at Finance26 in Frankfurt 🇩🇪, Pako and Laura at BTCHEL in Helsinki 🇫🇮 If you're around, go to say hi!

[BitBox @BitBoxSwiss]

We used the opportunity at the @blocktrainer event last weekend to battle test our Lightning integration! All Bitcoin sales at our booth were accepted with the BitBoxApp.

Fast payments, no hickups - everything went smoothly and was sent back to cold storage afterwards

[BitBox @BitBoxSwiss]

Spoiler: there were a lot of you today at @blocktrainer event🔥

[Stadicus @Stadicus3000]

@TPB_Inc Thanks for all the good work you done over the years. Your voice will be severely missed! 🧡