4 ms·

I don't think the bug bounty approach helps. Say an attacker compromised a certain batch of Ledger wallets. They might very well wait for a few years before t

• FatalLogic 4y ago
  Think about that situation from the attacker's POV. They have invested extensive resources, but they still haven't got anything. What if they're not the only one who compromised the insecure wallets? If they could do it, then probably someone else also could, and that other hacker could empty all the wallets first. Meanwhile, users like you will be occasionally moving their Bitcoins around, sometimes to wallets that the attacker cannot access. If an attacker just wants to make money, they're unlikely to wait for years to exploit an old vulnerability. In the real world, most security vulnerabilities get exploited quickly, because they are very likely to lose value as time passes. You can find numerous real examples of this attitude, such as weak brain wallet keys which are exploited in seconds, instead of waiting and hoping that more money will accumulate in the address before someone else steals it And, like I suggested already, a practical best case solution for the paranoid is diversifying your assets and security methods, so you can identify vulnerability sources early and be unlikely to lose everything Edit : Bottom line though is that you cannot use Bitcoin in totally trustless way, I think. Nothing in security or in real life is totally trustless. So do your best to employ reasonable precautions and mitigations and then get on with your life