From Matthew Kratter's Bitcoin University
Video Description
In this video, I discuss the Dark Skippy attack that uses malicious firmware to extract your seed from your hardware wallet and broadcast it to the Bitcoin network, where it can be used by an attacker to steal your Bitcoin.
The best ways to protect against Dark Skippy include:
- Use widely vetted hardware wallets like the Coldcard or Blockstream Jade
- Make sure they have not been tampered with en route
- Verify all firmware before installing
- Consider using multi-vendor multisig