Specialized advisory services in digital assets and wealth protection
Wyoming, USA
Joined April 2025
- Tweets283
- Following125
- Followers989
- Likes2K
Solidus Wealth retweeted
If you are Brazilian and planning to protect your wealth using Bitcoin, stablecoins and tokenized offshore structures in a tax-efficient manner, get in touch with us.
We are here to help.
If you are Brazilian and planning to protect your wealth using Bitcoin, stablecoins and tokenized offshore structures in a tax-efficient manner, get in touch with us.
We are here to help.
Solidus Wealth retweeted
Com o seu negócio principal de Business analytics gerando 0 de caixa, a Strategy assumiu um compromisso de pagar ~$1.6 bilhão em dividendos por ano.
Agora esse custo joga contra o acionista da MSTR.
braziljournal.com/o-bitcoin-…
Solidus Wealth retweeted
VAMOS APRENDER COM OS ERROS DOS AMIGOS?
Houve um roubo de dezenas de milhões de dólares em Bitcoin por conta de carteiras Ledger Nano X sabotadas (ataque de supply chain).
O revendedor abria os dispositivos e colocava um "chupacabra", um circuito adicional que lia a tela e enviava as informações via internet pro ladrão. Na imagem abaixo (do @MagicalTux), dá pra ver a placa legítima e ela com o implante. O circuito é composto de um chip e-SIM, um outro pra espionar a tela e um IoT pra comunicar com a net (o maior deles tem 1 centímetro!).
Ataques desse tipo são antigos e muita gente já foi roubada. Mas como mitigar esse risco?
- Compre apenas de revendedores autorizados e bem recomendados. Esse tipo de ataque é muito mais comum em marketplaces aleatórios. Infelizmente neste caso parece que a loja era autorizada e confiável mas trocou de dono recentemente.
- Muitos dispositivos de carteira podem ser abertos e verificados fisicamente, como é o caso da Ledger Nano X. Dá pra abrir sem ferramentas e conferir o hardware vendo fotos no site. Você perceberia a diferença?
- Não deixe todo seu patrimônio num ponto único de falha! Um ataque nele vai te deixar sem nada.
- Não guarde muito dinheiro em um cofre barato. Se o dispositivo custou uns 100 dólares, não deixe mais que, sei lá, mil, cinco mil dólares. Não economize em segurança!
Pra valores altos, invista em segurança! Estude e experimente diferentes soluções, faça cursos, pague consultoria, converse com outros bitcoinheiros etc.
ALT Fotos da placa origina e com o implante.
Solidus Wealth retweeted
Multi vendor multisig protects you against many types of attack
After the Coldcard RNG bug, some advised rolling dice or adding a passphrase. Both saved a few users this time. Neither protects against the next flaw.
Multi-vendor multisig should be the new standard.
New article on why, with 5 concrete Liana setups → wizardsardine.com/blog/the-m…
KYC - Kill Your Costumer
REVOLUT REPORTEDLY EXPOSED CUSTOMER DATA, INCLUDING BITCOIN TRANSACTION HISTORIES
Revolut reportedly disclosed customers’ personal and financial data after responding to a fraudulent government request sent from an unauthorized email account using a real government agency’s domain.
The exposed data included names, addresses, phone numbers, passport or driver’s license copies, verification selfies, account statements, withdrawal records and full transaction histories, including Bitcoin activity.
ZachXBT said the incident appears limited in size but may have specifically targeted high-net-worth users.
There is no indication Revolut’s systems were breached or customer funds were stolen. Revolut has yet to publicly comment on the reported exposure.
Muito bom, recomendamos:
Dice Rolls, Entropy, and SeedSigner | Keith Mukai SLP766
@keithmukai of @seedsigner joins to explain why 1.4 percent variance in cheap dice still delivers full 128-bit entropy and how to verify rolls across devices.
Timestamps
03:10 — Cheap Dice Only 1.4% Unfair?
06:29 — Shake Multiple Dice in a Box
08:26 — Verify Dice Rolls Across Devices
11:02 — Verify Dice Seeds With Fake Rolls
13:50 — Multiple Test Rounds Foil Attackers
16:36 — 90% Users Choose Easy RNG Mode
19:08 — Jade's D&D Dice Method?
21:53 — Build Your Own: Avoid Mailing List Leak
24:48 — Stateless Device vs Evil Maid Attack?
26:45 — Hand-Drawn SeedQR: Skip Typing 24 Words
29:02 — SeedSigner for Long-Term Cold Storage?
31:30 — Evil Maid SD Card Swap
35:27 — Why Multisig Beats Single-Sig + Passphrase
37:14 — Scan Sparrow PDF QR to Load Multisig
42:16 — No One-Size-Fits-All Security
46:41 — Understand Dice Rolls Yourself
49:13 — Take Baby Steps to Multisig
No multisig addresses were drained in connection with the Coldcard RNG entropy failure exploit.
On-chain analysis of the July–August 2026 sweeps linked to the Coldcard firmware RNG regression shows that every drained address was single-signature. No multisig (P2SH, P2WSH, or otherwise) outputs or addresses appear among the confirmed drained set across the reported waves.
This is consistent with the nature of the vulnerability: the attack reconstructed private keys from the reduced-entropy seed space offline and spent from addresses controlled solely by those keys.
Multisig constructions in which the signing threshold could not be met exclusively by keys derived from affected Coldcard seeds remained outside the observed attack surface
Solidus Wealth retweeted
Terceiro convidado confirmado no próximo AQUA Spaces! 💧🎙️
@narcelio traz a visão de um DEV com mais de 20 anos de experiência para a conversa sobre os acontecimentos e ataques recentes no ecossistema Bitcoin e cold wallets.
Ative o lembrete 👇
teapawt.net/i/spaces/1AxRnZPmwLRxl
Solidus Wealth retweeted
🚨 New COLDCARD firmware is available: 5.6.1 for Mk4/Mk5 and 1.5.1Q for Q.
This release follows three weeks of sustained review since our July 31 hotfix. We continue to acknowledge the customers who suffered severe financial losses from the seed-generation attack.
Every newly generated seed now requires one source of user entropy: at least 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. This input is combined with fresh entropy from the STM32 TRNG, SE1, and SE2.
The release also adds staged-PSBT verification immediately before signing, stronger USB and firmware-update boundaries, improved Delta Mode isolation, active-wallet backup fixes, stronger RNG initialization and fault checks, safer SIGHASH defaults, and many additional security and correctness improvements.
Important: Updating does not repair an existing seed generated on affected firmware. If the advisory applies to your seed, update your device, generate and verify a new seed, then move your funds.
We strongly recommend that all Mk4, Mk5, and Q users update and verify the signed firmware download.
Thank you to every researcher who reported issues, reproduced edge cases, reviewed fixes, and helped make this release stronger.
blog.coinkite.com/coldcard-s…
Solidus Wealth retweeted
2027 vai ser satânico...
Split payments, med 2.0, retenção de valores por 24 horas a depender do volume de stablecoin que você compra
Eu recomendo lascar-lhe na off shore para tankar
hodle.com.br/offshore
Solidus Wealth retweeted
Hoje às 20h teremos mais uma call sobre autocustódia!
Vai ser no Discord mas transmitirei uma live por aqui.
- Apresentação sobre autocustódia e segurança
- Workshop de multisig
- Sessão para perguntas e debate
discord.com/events/791295335…
