Hardware wallets are the safest way to store your coins, right? well, they're only as safe as the firmware that is verifying transactions.

researchers have discovered a flaw called “dark skippy” which allows a hack to embed secret code into a public blockchain transaction allowing the extraction of the private keys.

the trick is that a user has to load malware into the hardware wallet first. the wrong download on the wrong wallet.

stay safe out there! and happy bitcoining. i'm sure this was old news but i found it interesting and wanted to share.

edit for spelling. dark defender on twitter is the source. i do not tweet but if you want details you can go to darkdefederxrp on reddit or darkdefenderxrp on twitter.