Yes, the attacker would watch every transaction on the blockchain for their bits. Not hard to do, since there are just a few transactions per second. Interesti

Yes, the attacker would watch every transaction on the blockchain for their bits. Not hard to do, since there are just a few transactions per second. Interesting idea with the bias checking. Not sure if it is possible. If it is, it would probably need very clever software to do that. One that bombards the hardware wallet with a big number of seeds and transactions and checks if it can find indications of the seeds having an impact on the signatures.