> Show me an actually malicious hardware wallet that becaves as you've described, and you'll have made your point. I'm not the OP and although I agree with you

> Show me an actually malicious hardware wallet that becaves as you've described, and you'll have made your point. I'm not the OP and although I agree with you, you may be interested in the corollary for a "stronger" attack than OP defined: https://bitcointalk.org/index.php?topic=581411.0 https://bitcointalk.org/index.php?topic=581411.0 and https://github.com/tintinweb/ecdsa-private-key-recovery https://github.com/tintinweb/ecdsa-private-key-recovery Constructing such an airgapped hardware wallet is as trivial as a raspberry pi running a patched bitcoin client. In my opinion the more realistic construction than a that of "Reflections in Trusting Trust".