ecdsa-private-key-recovery

> Show me an actually malicious hardware wallet that becaves as you've described, and you'll have made your point. I'm not the OP and although I agree with you, you may be interested in the corollary for a "stronger" attack than OP defined: https://bitcointalk.org/index.php?topic=581411.0 and https://github.com/tintinweb/ecdsa-private-key-recovery Constructing such an airgapped hardware wallet is as trivial as a raspberry pi running a patched bitcoin client. In my opinion the more realistic construction than a that of "Reflections in Trusting Trust".

> You can't spend at all without the private keys of the whales because the network nodes won't trust the chain. Here is a simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r [1] https://github.com/tintinweb/ecdsa-private-key-recovery