Evgeny Dvornitsyn

Security & infra for on-chain finance. Built crypto custody, MPC/TEE key systems. Ex-Citadel. Startups, Bitcoin, AI agents.

[Evgeny Dvornitsyn @dvornitsyn]

I write about security, crypto custody, on-chain finance, Bitcoin, AI agents.

I’ve built custody/key-management systems using MPC, TEEs, policy engines, and institutional wallet infrastructure.

Most crypto losses are not cryptographic failures — they’re product, policy, and operational failures.

[Evgeny Dvornitsyn @dvornitsyn]

@Lahannin A couple of things I'd push back on:
1) memorable passphrase - this makes it guessable via dict/rainbow attack, dice words is better with 6 random words
2) storing passphrase in a strongly protected password manager is a defendable choice

[Evgeny Dvornitsyn @dvornitsyn]

@saylor hahaha

[Evgeny Dvornitsyn @dvornitsyn]

@MindfulArrow @Trezor unless you have Coldcard without Dice and without passphrase, the biggest risk right now is acting out of panic and making a mistake

[Evgeny Dvornitsyn @dvornitsyn]

@the_smart_ape @Trezor nice, would be nice to add Jade from Blockstream. Trezor for the win though.

[Evgeny Dvornitsyn @dvornitsyn]

@punk4307 Your keys on coldcard didn't have sufficient entropy, meaning guessable by the attacker. It has nothing to do with device being offline or Wasabi. Sorry for your loss, it's not your fault and this hack is very unfortunate.
But for future, look into entropy,passphrase,dice rolling

[Evgeny Dvornitsyn @dvornitsyn]

@brucefenton funny enough, closed source code would've prevented this from happening, security by obscurity is a thing and it does work. Open source software in itself is a good thing, but it's not religiously good and needs to be thought of in full context.

[Evgeny Dvornitsyn @dvornitsyn]

@rexarr69 Would the OG whales be dropped tokens on new coin? That would make sense to get OGs support, could be vesting.

[Evgeny Dvornitsyn @dvornitsyn]

@recouso not a fan of the guy, but he is not wrong.

[Evgeny Dvornitsyn @dvornitsyn]

@Trezor Q to Trezor. If the 24 word seed was generated on Gen 1 trezor device and kept being imported to new devices, is it still safe? It comes down to 2 sources of entropy still being enoug, right?

[Evgeny Dvornitsyn @dvornitsyn]

@avaxjesus funny joke

[Evgeny Dvornitsyn @dvornitsyn]

@MustStopMurad I can't believe we are still talking about this stupid meme. He just can't get over it.

[Evgeny Dvornitsyn @dvornitsyn]

@TrustlessState Time to start watching Bankless again :). The ETH Maxi bias was unbearable, glad you moved on.

[Evgeny Dvornitsyn @dvornitsyn]

@KyrosQF @cryptomanran yeah, it would probably only happen on a wick...
I think there will be a lot of demand for STRC as RWA on-chain, similar to how people do ETH looping, they'll loop STRC.

[Canteen @thecanteenapp]

Hot off the press! New thoughts on prediction market unbundling - we're living in a new world as the monoliths fall apart =)

[Evgeny Dvornitsyn @dvornitsyn]

@MrGSO_Sol @scottmelker There is no liquidation of BTC collateral. Does anyone read anymore :).

[Evgeny Dvornitsyn @dvornitsyn]

@saylor @BorisJohnson bottom signals everywhere

[Evgeny Dvornitsyn @dvornitsyn]

@bryan_johnson second reason is kinda woke tbh

[Evgeny Dvornitsyn @dvornitsyn]

@litecoin Asians don’t age thought, maybe that’s why Charlie not in a hurry