Bitcoin sidechains should abandon federated multi-signature custody models

Overview Debates Related claims Topics Sources

Deutsche Bank plans to expand its cryptocurrency custody services into Asian financial hubs, specifically targeting Singapore and Hong Kong in 2027

Deutsche Bank's new Bitcoin and Ethereum custody service will directly manage crypto wallets and private keys on behalf of asset managers, hedge funds, and corporate entities

Deutsche Bank plans to launch cryptocurrency custody services in Germany within weeks, initially offering Bitcoin and Ethereum custody to institutional clients

Major global financial institutions including BNY Mellon, State Street, Standard Chartered, U.S. Bank, and Citigroup have committed to offering direct crypto custody services

A tampered Ledger device intercepted the 24-word recovery seed phrase displayed on screen and transmitted the data using a radio frequency transmitter

Babylon's Trustless Bitcoin Vaults protocol locks Bitcoin in self-custodial Taproot-based UTXOs directly on the Bitcoin network without transferring custody to third-party custodians.

A Bitcoin user can store wealth by memorizing a 12-word seed phrase

Hardware wallet manufacturer Trezor terminated all authorized reseller partnerships, requiring customers to purchase devices directly from Trezor

Former Mt. Gox operator Mark Karpeles warned of secondary markets selling modified hardware wallets that lack secure enclaves or contain tracking hardware

Hardware implants in cryptocurrency wallets bypass the secure enclave by extracting private entropy directly from the display screen

Former Mt. Gox CEO Mark Karpelès reported finding a spy implant inside a unused Ledger Flex device purchased at a Metapod location in Singapore's Changi Airport.

Ledger Donjon stated the hardware implant found in CryptoBilis-sold devices operates as a separate component without modifying the device's Secure Element, Ledger operating system, or transaction signatures

Ledger confirmed that MediaMarktSaturn suspended sales following a single customer implant report in Germany on October 13, noting no loss of funds has been linked to MediaMarkt devices

Ledger stated that all verified fund losses involve signers sold through CryptoBilis, but noted third-party loss estimates remain unverified by the company.

Third-party on-chain analyses estimate total losses from tampered Ledger devices sold through Southeast Asian reseller CryptoBilis range between $86 million and $102 million across Bitcoin, Ethereum, and Tron

Ledger advised CryptoBilis customers to leave unused CryptoBilis-sold devices unpowered and promptly transfer assets from activated CryptoBilis-sold signers using a newly generated recovery phrase

Security researcher Johannes reported finding unauthorized cables and cellular modules inside two Ledger Nano X devices purchased at separate MediaMarkt stores in Germany.

Ledger asked CryptoBilis to pause all sales and shipments of Ledger signers while cybersecurity teams examine recovered CryptoBilis hardware

Hardware wallet manufacturer Trezor removed CryptoBilis from its reseller list and announced plans to reduce its broader reseller network effective January 1, 2027.

Store records identified distributor Aqipa GmbH as the inventory supplier for the Ledger hardware wallets sold at MediaMarkt locations.