Dark Skippy hardware-wallet seed-exfiltration attack disclosed
Researchers disclose Dark Skippy, a faster method for malicious Bitcoin signing devices to leak seed material through signatures.
On August 9, 2024, Dark Skippy hardware-wallet seed-exfiltration attack disclosed. Researchers disclose Dark Skippy, a faster method for malicious Bitcoin signing devices to leak seed material through signatures.
Dark Skippy showed that a compromised signing device could covertly leak a wallet seed through only two signatures. It was a disclosure of a malicious-signer technique, not evidence that the attack had been observed stealing user funds in the wild.
The event preserves a concrete part of Bitcoin's security history and the operational assumptions users, wallet developers, exchanges or node operators had to manage at the time.