Back to News
ImportantSourceMarsBit

Trezor高管回应ZachXBT质疑:硬件钱包仍是普通用户最强自托管方案

火星财经消息,7 月 18 日,针对链上调查员 ZachXBT 此前称「所有硬件钱包都是垃圾,不建议用于签名交易或存储资金」的言论,Trezor 首席商务官 Danny Sanders 作出回应,认为这一评价过于片面。 Sanders 承认,硬件钱包的软件或固件更新确实可能影响高价值交易等紧急操作,当前产品在安全性与易用性之间仍存在不足。但他表示,ZachXBT 所描述的场景主要适用于管理巨额资产的高级用户,单一硬件钱包本身就不是最佳方案,因此不能据此否定整个硬件钱包类别。 Sanders 还指出,将一部专门用于签名和存储资产的 iPhone 纳入高级安全方案具有一定价值,但相比硬件钱包,手机因具备 Wi-Fi、蓝牙、蜂窝网络及 iMessage 等功能,攻击面更大。同时,硬件钱包配备独立显示屏,可供用户在签名前核对交易信息,对于普通加密用户而言,仍是目前最强的自托管方案。 此外,Tornado Cash 联合创始人 Roman Storm 部分认同 ZachXBT 的观点,认为当前移动钱包缺乏对 BIP39 Passphrase(助记词密码)和离线签名(Air-gapped Signing)的支持,建议钱包开发者尽快补齐相关安全功能。
Disclaimer: The views above are the author's only and do not represent 711BTC. Nothing here constitutes investment advice.

Related

07-05 17:29

ZachXBT: A hacker withdrew 3200 ETH from Tornado and laundered approximately $5.5 million through Circle's CCTP cross-chain service.

PANews reported on July 5th that on-chain detective ZachXBT disclosed on his personal channel that a hacker withdrew approximately 3200 ETH via Tornado Cash between July 2nd and 3rd. The funds are related to two private key leaks. The address subsequently used Circle's CCTP cross-chain bridge to launder approximately $5.5 million in assets across chains, further transferring USDC to seven deposit addresses on the Arbitrum network. ZachXBT pointed out that this fund flow exhibits a typical decentralized money laundering path, utilizing mixing tools and cross-chain infrastructure to reduce the difficulty of tracing. The related on-chain assets are still continuously circulating.

07-05 16:10

Step Finance hackers dumped 261,900 SOL tokens and transferred them to Tornado Cash.

According to Foresight News , Lookonchain monitoring revealed that after five months of silence, the Step Finance hackers sold all 261,933 SOL tokens (approximately $21.4 million), transferred the funds across chains to Ethereum, purchased 12,128 ETH, and then deposited these ETH into Tornado Cash for money laundering.

07-04 16:35Important

The UXLINK attacker bought 6,001 ETH with 10.54 million DAI and then transferred the funds via Tornado Cash.

PANews reported on July 4 that, according to Onchain Lens monitoring, the UXLINK attackers spent 10.54 million DAI at an average price of $1,757 to buy 6,001 ETH and transferred the funds through Tornado Cash.

07-03 09:50Important

The hinkal attacker deposited 410 ETH into Tornado Cash, worth approximately $700,000.

According to Foresight News , PeckShield monitoring revealed that the Hinkal attackers deposited 410 ETH into Tornado Cash, worth approximately $700,000. They then used Thorchain to transfer 44.7 ETH from Ethereum to the Bitcoin network.

06-26 09:16Important

Researchers: Tornado Cash's suspicious DAO proposal may threaten $23 million in DAO funding.

PANews reported on June 26 that L2BEAT researcher @sergeyshemyakov posted on the X platform that a suspicious DAO proposal appeared on Tornado Cash on June 25. The target contract of this proposal is unverified, which is highly unusual for Tornado Cash DAO proposals, suggesting it should be considered malicious. The proposal creator's address received funds via Railgun four days prior. If the proposal passes and is executed, the governance contract will make a delegate call to the target contract. sergeyshemyakov stated that the Tornado Cash liquidity pool itself is secure, but this proposal may be a direct attack on the Tornado Cash DAO, which currently holds approximately $23 million worth of TORN tokens.

06-25 21:12

Tornado Cash developer Alex Pertsev will speak at Netherlands Blockchain Week.

According to Foresight News , the Ethereum X account posted that Alex Pertsev, one of the developers of Tornado Cash, will speak at the Netherlands Blockchain Week in Amsterdam, focusing on the question of whether developers of decentralized software systems should be held accountable for the criminal behavior of their users. Alex Pertsev has been released on bail pending a retrial application but is unable to leave the Netherlands.