“Dark Skippy” mechanism can steal Bitcoin hardware wallet private keys

The latest report shows that security researchers have discovered a new attack mechanism called "Dark Skippy", which hackers can use to extract private keys from Bitcoin hardware wallets with only two signature transactions. The vulnerability may affect all hardware wallet models, but it will only work if the victim is tricked into downloading malicious firmware. Previous versions of "Dark Skippy" required dozens of transactions to work, and the new version of "Dark Skippy" only requires a few transactions to execute. In addition, the attack can be performed even if the user relies on a separate device to generate mnemonics. The disclosure report was published by Lloyd Fournier, Nick Farrow and Robin Linus. Fournier and Farrow are co-founders of hardware wallet manufacturer Frostsnap, while Linus is a co-developer of Bitcoin protocols ZeroSync and BitVM. (Cointelegraph)