Buterin Calls for Hardware Wallets Users Can Verify
Vitalik Buterin says wallet owners should be able to verify their hardware, citing hidden components that could leak keys and the need for inspectable chips.
Key Notes
- Buterin’s November 3 Devcon keynote called for hardware whose security users can independently verify.
- His example concerned hidden cellular-enabled hardware that could leak wallet secrets, not a new requirement for government oversight.
- Open chip designs and checks on manufactured devices address different parts of the security problem.
Vitalik Buterin says hardware-wallet owners should be able to verify the devices protecting their cryptocurrency, warning that opaque hardware can leave users unable to detect added components that leak sensitive information.
The Ethereum co-founder made the argument during his Devcon keynote in Mumbai on November 3. His focus was open designs and independently checkable security, rather than a new regulatory regime for wallet owners.
A SIM-Enabled Implant Illustrates the Risk
Buterin described the unacceptable uncertainty of owning a hardware wallet without knowing whether somebody had attached a SIM-enabled component that could transmit private keys to an attacker. He used the example to argue that users need stronger ways to establish what their hardware actually does.
“We need more open and more verifiable silicon,” he said.
The Ethereum Foundation echoed the argument in a November 3 post, saying users should not have to hack a television or dismantle a hardware wallet to determine whether it can be trusted. The foundation called for accessible chip technology whose properties can be independently examined.
Open Designs Are Only Part of Verification
Buterin developed the wider argument in his September 2025 verifiability essay. Hardware security, he wrote, depends on more than the intentions of the company selling a device. A chain of proprietary components and tools can contain weaknesses even when the manufacturer is acting honestly.
That creates two distinct questions: whether a design has the claimed security properties, and whether the manufactured chip matches that design. Publishing a blueprint helps researchers study the first question, while physical inspection addresses the second.
His essay discusses examining sample chips destructively, using imaging techniques and supplementing detailed inspections with narrower checks that ordinary devices can perform. It presents wider access to verification tools as a development goal, rather than something every wallet owner can already do.
Why an Authentic Chip Is Not the Whole Device
Ledger’s own genuineness threat model illustrates the distinction. Its authentication process verifies the secure element, but the company says that check cannot detect unauthorized physical modifications, including spying implants, if the original chip remains intact.
An authentic security component can therefore coexist with added electronics elsewhere in a device. A successful authenticity check does not establish that every part of the finished wallet is unmodified.
CoinScreamer previously covered Ledger’s October 10 implant confirmation, which concerned one affected customer’s device. That finding established physical tampering in the examined unit without identifying the full distribution of altered devices.
Our subsequent Trezor warning concerned a different evidentiary stage. Trezor treated a Safe 5 implant report linked to former reseller CryptoBilis as credible, but its notice said it had not yet received the device for laboratory examination and had no related reports of stolen funds.
Those cases give practical context to Buterin’s proposal: ownership of private keys also depends on confidence in the equipment that handles them, from its published design to the device delivered to the buyer.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
