Hackers Can Extract Private Keys from Bitcoin Hardware Wallets with Only Two Signature Transactions via New Attack Method: Security Agency

On August 9, a new report revealed that security researchers have discovered a new attack mechanism called “Dark Skippy” that hackers can use to extract private keys from Bitcoin hardware wallets with only two signed transactions. The vulnerability could affect all hardware wallet models, but only works if the victim is tricked into downloading malicious firmware.

While previous versions of “Dark Skippy” required dozens of transactions to function, the new version of “Dark Skippy” requires only a few transactions to execute. In addition, the attack can be executed even if the user relies on a separate device to generate the mnemonic.

The disclosure report was released by Lloyd Fournier, Nick Farrow and Robin Linus - Fournier and Farrow are co-creators of hardware wallet maker Frostsnap, while Linus is a co-developer of the Bitcoin protocols ZeroSync and BitVM. (Cointelegraph)