As the ColdCard scandal continues, I've been thinking nonstop about how to secure my stack.
I had an MK3 and a Q and was able to move funds before they were stolen. My heart goes out to all not as fortunate.
Simplicity, plus understanding the complexity of self custody is critical. As men, we are solution-minded, and I've seen innumerable posts weighing exchanges, institutional custody, distributed multi-sig, and more. If there's a one-size fits all approach I'm open ears.
Here's where I've landed:
• I'm not willing to trust a lone company anymore
• Self Custody is the revolution, I must improve
• I need flexibility in my stack, to save and spend
Here's what I'm going to do:
• Build my own signing devices, one that holds a 6-month emergency fund, can receive monthly DCAs, and be used for spending (via BlueWallet/Muun etc)
• Build a multi-sig vault for long term storage that will one day be passed on (once I reach 1 BTC ofc)
Complacency is over. We were lied to, perhaps knowingly lied to.
"There's an old saying in Tennessee — I know it's in Texas, probably in Tennessee — that says, fool me once, shame on — shame on you. Fool me — you can't get fooled again."
To all Keystone users,
Every Keystone device, from Keystone Pro/Essential (Gen 1) to the current Keystone 3 Pro, is safe to use.
Keystone devices generate seed phrases using TRNGs from Secure Elements. 128 bits of entropy for 12-word seeds, 256 bits for 24-word seeds.
With Keystone 3 Pro, we went further with the trustless design.
The MCU and 2 independent Secure Elements each generate their own TRNG, 3 separate sources combined into the final boosted entropy.
We've also meticulously implemented and verified the seed phrase generation process to make sure the intended entropy is actually achieved at every stage.
You can check it yourself:
https://t.co/9iaDqa9j9f
On top of that, we have run several rounds of third-party security audits since launch, with the latest one ongoing as of January 2026. We also conduct continuous internal security reviews with the help of advanced AI tools.
Seed phrase generation is thoroughly reviewed for every audit.
Already have a seed phrase generated by your Keystone? You're good. Continue using it without any worries.
Got a new Keystone 3 Pro or want a trustless setup?
→ Add a passphrase after creating your seed phrase. It creates an entirely new wallet on top of your existing one. Store it separately from your seed phrase.
→ Use Casino-grade dice and roll at least 100 times with the dice-roll feature to hit 256-bit entropy, up to 256 rolls supported.
Still have doubts? Drop them below or shoot us a DM; we've got you 🤝
Why trust device-generated seed phrases? Take things into your own hands 🎲
Roll 99 dice, feed it into Keystone 3 Pro, and get a seed phrase with true 256-bit entropy.
@w_s_bitcoin creates one live & verifies it with Ian Coleman's tool 👇
My wife left me today. She said it was because I “never stop talking.” I said the yen carry trade is a $20 trillion leveraged bet that the Bank of Japan will never normalize rates and she said “I’m taking the dog.”
Let me explain to you what I was trying to explain to her.
For thirty years Japan ran rates at zero. Zero. Free money. So the entire planet borrowed yen for nothing and bought literally anything with yield. Treasuries, Mexican peso bonds, Nasdaq, your uncle’s crypto. That’s the carry trade. It’s not a strategy. It’s a short volatility position wearing a business casual outfit.
Then in August 2024 the BOJ raised rates 15 basis points. FIFTEEN. And the yen ripped, the Nikkei fell 12% in a day, and the VIX printed 65. That was the tremor. That was the trailer.
She said “you said this last year.” I said YES AND I WAS RIGHT, THE MARKET JUST FORGOT, and she started packing.
Japan’s debt-to-GDP is roughly 250%. The BOJ owns over half the JGB market. They are the market. There’s no price discovery, there’s a guy in Tokyo with a printer and a dream. Every basis point higher on the long end costs them real money on debt they can never actually repay in real terms. So what do you do when you can’t default and you can’t pay? You inflate. You always inflate. It’s the only tool that doesn’t require anyone to vote.
She said “our marriage counselor thinks you have anxiety.” I said your marriage counselor doesn’t know what the 30-year JGB is doing and she said “NOBODY KNOWS WHAT THE 30-YEAR JGB IS DOING, THAT’S THE POINT, PAUL.”
My name isn’t Paul. That’s how far gone we are.
Anyway I’ve got canned goods, a Kagoshima yield curve chart laminated above the bed, and nobody left to explain it to. So it’s you now. Buckle up.
Are you guys ready to throw Andy Back under the bus soon too? These are still just allegations, but I believe that they are true. New Bitcoin shitstorm coming very soon:
https://t.co/r7Rg4pLPge
https://t.co/Q85FN0guE3
How I'd Secure a Life Changing Amount of Bitcoin
If I were helping a friend secure a life changing amount of Bitcoin from scratch, this is the process I'd recommend:
1. Purchase two Bitcoin only hardware wallets from two different vendors and create a collaborative custody 2 of 3 multisig vault with @unchained , where you hold two keys and Unchained securely holds the third.
2. Generate each hardware wallet 24 word seed using a minimum of 100 dice rolls. Do not rely solely on the hardware wallet's random number generator.
3. Back up each seed on titanium and store every backup in separate secure geographic locations.
4. Download and save the Bitcoin config file immediately. Print multiple paper copies and store them in separate secure geographic locations. Unchained also retains a copy, but your recovery plan should never depend on a third party. This file contains the information required to reconstruct your multisig wallet, including the xpubs and derivation paths.
5. Import the Bitcoin config file into Sparrow Wallet.
6. Compare the receive addresses shown in Sparrow Wallet with those shown in Unchained and ensure they match exactly.
7. Send a small amount of bitcoin to your new multisig wallet.
8. Confirm the UTXO appears correctly in both Sparrow Wallet and Unchained.
9. Wipe both signing devices completely.
10. Recreate the watch only wallet in Sparrow Wallet using only the Bitcoin config file.
11. Restore both signing devices from their titanium seed backups.
12. Verify each restored signing device can successfully participate in signing for the reconstructed wallet using your normal workflow, whether USB, QR codes or microSD. Confirm the receive addresses still match those shown in Unchained and that the test UTXO is visible.
13. Spend the test bitcoin to a separate wallet you control and verify the transaction is successfully broadcast and confirmed.
14. Never use that original receive address again. Generate a fresh receive address for your long term bitcoin holdings and always use a fresh receive address for every future deposit.
15. Only after successfully completing every step above should you transfer a meaningful amount of bitcoin to the new receive address.
I hope someone finds this useful. This isn't the only way to self custody bitcoin. It's simply the process I'd be comfortable recommending to friends and family.
I think 2-of-2 is often the cleanest Bitcoin multisig setup for people managing multisig themselves - unless they use a collaborative 2-of-3 service like Casa or Unchained.
Before replying “no, you dont have redundancy you idiot!” read the entire argument.
Multisig has to solve two separate problems:
Recovery
Signing
Recovery means making sure you can still access the wallet if a device is lost, a house burns down, or you die.
Signing means keeping the required keys separated until you intentionally authorize a transaction.
The second problem gets harder as you add more independent keys.
With 2-of-2, I only need to manage two key roles:
My key.
The shared key.
My key is mine. I back it up and store it carefully.
The shared key can be copied and distributed.
I can seal one copy and send it to my cousin in Vermont.
Another can go to my sister nearby.
Another can stay with my lawyer.
Those are not three different keys.
They are three backups of the same second key.
That distinction matters.
I can improve geographic redundancy without increasing the number of independent keys required to sign.
The backups can use tamper-evident bags, steel plates, hardware wallets, or dedicated offline devices.
My lawyer could even hold a phone or hardware wallet loaded with the shared key and learn how to sign a PSBT.
When I want to move funds, I sign with my key and coordinate one signature from the shared key.
That is the whole signing system.
Legacy planning is also straightforward.
Leave your wife, child, executor, or trustee instructions explaining where your key is, where copies of the shared key are held, where the wallet configuration is stored, and how to sign.
Now compare that with self-managed 2-of-3:
To remain independent, you usually control at least two of the three keys.
But those two keys must stay separated.
Otherwise, you have recreated a single point of failure.
So where do they go?
One at home and one at the office?
Those locations may be close, accessible to the same person, or exposed to the same theft and coercion risks.
One at home and one at a vacation house?
Better separation, but now signing may require travel.
One on your phone and one in your safe?
Convenient, but both keys may still live in the same environment.
Two hardware wallets in the same safe?
That barely preserves the security benefit of multisig.
One burglary, fire, or coercion event can reach both.
The more often you transact, the stronger the pressure becomes to keep two keys nearby.
That is the core problem with self-managed 2-of-3.
On paper, you can lose one key.
In practice, you often end up storing the two keys you control in similar places because you need both available to sign.
The setup gains redundancy but loses actual separation.
There is another recovery problem that gets worse as multisig grows.
A 2-of-3 wallet only needs two private keys to spend.
But reconstructing the wallet still requires the public-key information for all three signers.
Lose one private key and you may still be able to spend.
But lose that key and the only record of its extended public key or wallet descriptor, and the remaining seeds alone may not reconstruct the wallet.
The same issue becomes worse with 3-of-5.
You may only need three private keys to sign, but recovery still depends on the complete five-key wallet configuration.
Multisig recovery is not just:
Keep enough seeds.
It is:
Keep enough seeds, all cosigner public keys, derivation paths, quorum, script type, and the full wallet descriptor or configuration.
Your family also needs to find and understand all of it.
More keys add signing redundancy.
They also add recovery state.
That tradeoff is usually ignored.
Key ordering can matter too, depending on the wallet construction.
Sorted multisig (BIP67) removes the manual ordering problem, but it does not remove the need to preserve the complete set of public keys and wallet metadata.
With 2-of-2, there are fewer independent keys, fewer cosigner records, fewer derivation paths, fewer backups to coordinate, and fewer ways for an heir to reconstruct the wrong wallet.
The obvious tradeoff is that 2-of-2 has no key-level redundancy.
If either key is completely lost, the wallet is lost.
That is why the backup design matters and you have to be able to pass the Fenton Tests.
The answer is not to store both keys together.
The answer is to create multiple geographically separated backups of each key while keeping the two key families separate.
One personal key family.
One shared key family.
Simple enough to understand.
Simple enough to test.
Simple enough to explain to your family.
A collaborative 2-of-3 setup changes the equation.
With Casa or Unchained, the provider holds the third key.
Normal signing may only require one of your keys plus the provider.
Your two personal keys can remain separated.
If the provider disappears, you can still recover with your two keys.
That gives you redundancy without forcing you to routinely bring your own two keys together.
So my view is simple:
For self-managed multisig, 2-of-2 is often the cleanest setup.
For collaborative custody, 2-of-3 makes sense because the provider changes the signing and recovery model.
The safest setup is not automatically the one with the most keys.
It is the one where the keys stay genuinely separated, signing remains usable, recovery is tested, and your family can understand what to do when you are gone.
🚨 THE CITY OF LONDON ENGINEERED THIS FINANCIAL CRASH AND THEY WARNED US MONTHS AGO
The City of London doesn’t just rule global finance… it OWNS it. Every central bank, every currency war, every oil flow answers to them.
The City Of London isn’t just a financial district. It’s a separate jurisdiction, with its own police, military system and financial authority, controlled by an elite global network that no government fully oversees… and it runs global finance.
They even control the sanctioned Iranian oil companies through their invisible networks while the world looks the other way. They are ALWAYS ahead. Always.
The famous City of London banker @LordBelgrave dropped this exact poster months ago.
Now watch it play out in real time:
📌 THE POSTER SHOWED: Oil barrels and today: Oil crisis exploding higher
📌 THE POSTER SHOWED: Yen and Euro symbols and today: Japan’s massive yen carry trade is unwinding… and the U.S. is stepping in to “save” the yen by dumping euros.
📌 THE POSTER WARNED: “LIQUIDITY EVENT” + “SYSTEMIC RISK” and today: If this carry trade fully unwinds it will trigger a GLOBAL LIQUIDITY CATASTROPHE, massive forced U.S. Treasuries sell-off and worldwide market destruction.
📌 THE POSTER WARNED: “MARGIN CALL” + “LIQUIDATIONS” and today: Exact margin calls and forced liquidations just hit Japan and South Korea HARD in the last few days.
📌 THE POSTER SCREAMED: “RISK OFF”and today: The U.S. Treasury Secretary just warned banks and institutional traders that further interventions are coming, wind off your risky yen market speculations NOW.
And the final chilling detail…
The banker stands RIGHT ON TOP of the Federal Reserve System seal like it’s nothing.
They design the crash. They stand above the Fed.
The City of London. This is who Trump is going against.
🦔The US Treasury bought Japanese yen on Friday for the first time since 2011. But it didn't sell dollars to do it. The NY Fed sold euros and bought yen on behalf of the Treasury through Goldman Sachs and Morgan Stanley, according to the Financial Times. A Reuters photographer caught Treasury Secretary Bessent's notepad at a Camp David cabinet meeting. It read "To Do Buy Japanese Yen $5-10 bil." Japan spent $58.97 billion in a single day to defend its currency, the largest intervention in its history. In January, Bessent refused to help.
My Take
Japan holds $1.19 trillion in US Treasury bonds, the largest foreign holder on earth. When the yen falls this far, Japan sells those bonds to raise dollars and defend its currency. Every bond Japan sells adds supply to the US bond market and pushes yields higher. The 30-year yield hit 5.23% this week, highest since 2007. Your mortgage, car loan, and credit card APR all follow Treasury yields. The US sold euros to buy yen because if it sold dollars instead, that would weaken the dollar, which goes against US policy. So the euro took the hit and Europe didn't get a vote.
Bessent refused to touch the yen six months ago. Friday he bought it with euros through Goldman and Morgan Stanley. Japan also has access to the Fed's FIMA Repo Facility, which lets it borrow dollars against its Treasury holdings instead of outright sales. That could keep over a trillion in US bonds off the open market and hold yields where they are. Japan and the US may announce a joint currency policy as early as next week. A currency crisis in Tokyo just became a US fiscal priority because the chain from a weak yen to a higher American mortgage payment runs straight through the Treasury bond market.
Hedgie🤗
The Trump Administration delivers for America's trusted partners. Economic security is national security. And the U.S.-Japan alliance is built on both.
Friday's coordinated foreign exchange actions countered disorderly yen movements.
Treasury remains attentive and in close communication with our counterparts at MOF and BOJ. We will not hesitate to participate in further joint intervention.
The FIMA Repo Facility is an important backstop. We would encourage it to be upsized in the coming months.
We strongly support Japan's decisive market and monetary steps to correct the substantial undervaluation of the yen.
The Takaichi government is moving into an exciting new phase of Abenomics, as nearly 15 years of powerful stimulus have created durable, robust underlying economic dynamics.
🚨 BREAKING: TRUMP IS DECLARING TOTAL WAR ON THE CITY OF LONDON’S GLOBAL FINANCIAL EMPIRE
THE U.S.-IRAN CONFLICT IS THE TRIGGER FOR A CONTROLLED DEMOLITION!
Promethean Action’s Barbara Boyd drops the red pill in 5 minutes flat.
For 118 years since Britain stole Iran’s oil in 1908 and created BP, every Iranian government (the Shah and the Ayatollahs) has answered to the same master: the British City of London financial empire.
The City of London isn’t just a place, it’s the invisible hand that owns the oil empires, rigs the money printers, and pulls the strings of EVERY central bank on Earth.
Even the “independent” Federal Reserve?
Quietly owned and influenced by London’s banking cabal. Trump basically admitted it when Jerome Powell was running the show, the Fed was never America’s.
Now the gloves are off. They’re forcing a systemic meltdown to break the chains. The engineered U.S.-Iran war isn’t about nukes or “democracy.” It’s a financial nuclear option designed to crash the entire City of London architecture and abuse of power.
Look at Japan: the yen-carry trade is exploding, and the U.S. Treasury Secretary is openly intervening in the Bank of Japan’s operations, hunting euros to buy yen, pure power move against the old money order.
The famous City Of London banker @lordbelgave has been dropping the breadcrumbs for months. The hints were there if you were watching.
Trump isn’t just fighting the Deep State… he’s going after the oldest, darkest financial empire in history. The City of London’s centuries-old control is about to burn.
The crash is coming. The reset is real. And Trump is the one lighting the match.