Benjamin “Bader” Ampen (@bampen) header
Benjamin “Bader” Ampen (@bampen) profile picture

🥋+🏍 + 🗝️

🌎🌍🌏
Joined May 2009
Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)Photo by Benjamin “Bader” Ampen (@bampen)
Benjamin “Bader” Ampen retweeted
Not your keys, not your coins.
4
4
5
14
3,153
Benjamin “Bader” Ampen retweeted
What do recent hardware wallet attacks and AI-driven exploits mean for your self-custody setup? This Thursday, @lopp and the Casa team go live to break it down and walk through how to stay protected. Set a reminder: xitter.gq/i/spaces/1YxNrblWqLpxw

1
5
2
15
3,627
Whether you’re a @CasaHODL’s member or not, you don’t want to miss this conversation if you’re interested in Bitcoin and security 🔐
What do recent hardware wallet attacks and AI-driven exploits mean for your self-custody setup? This Thursday, @lopp and the Casa team go live to break it down and walk through how to stay protected. Set a reminder: xitter.gq/i/spaces/1YxNrblWqLpxw

1
77
« Why would I pay a subscription to hold my own bitcoin? » Fair question. A hardware wallet is a one-off purchase, and for small amounts it's a perfectly good setup I think. What the subscription pays for is everything around the keys: coordinating several keys across devices, guided replacement if one fails, inheritance for your family, emergency lockdown, and people you can actually reach when something feels off. Casa Standard starts at $21 a month or $250 a year. The question I'd ask back: at what amount would losing your bitcoin really hurt?
1
82
Spreading wealth across places has been standard advice for a long time. With bitcoin it can be done with a few keys and some planning, no holding structures needed. The idea: instead of one seed in one place, you use a multisig vault where, say, any 3 of 5 keys can sign. Then you spread the keys. One at home, one in a safe deposit box, one with a trusted person in another city, one in another country. Lose two keys, or have two out of reach, and you can still move your funds. Someone who gets hold of one or two can't. It's more work than a single hardware wallet in a drawer for sure, but you benefit from much better security! For people whose lives span several countries, which describes a lot of people in this region in particular, it's worth thinking about seriously. PS: remember, in a multisig setup, the different keys enable you to sign transactions to move funds; they don’t individually “hold” a part of your assets, that’s why losing one or two in a 3-out-of-5 architecture doesn’t mean you’ve lost any of your funds.
3
104
Thank you @lopp for making your letter public 🙌 Your points about personal freedom and sovereignty really resonate with me. Proud to work for @CasaHODL and happy to help anyone who needs support with their “smart self-custody architecture” 🤝
An open letter to the Bitcoin ecosystem:
114
The riskiest moment in self-custody is often the transfer. Buy on an exchange. Copy an address. Paste it. Hope your clipboard hasn't been tampered with. Check the first and last characters. Wait. Repeat every month if you're stacking. In the US, Casa members can buy bitcoin directly in the app and send it to their vault in seconds, and ACH purchases now come with zero fees for transfers of $250 or more. For larger positions, our OTC desk handles execution. Fewer apps, fewer copy-pastes, fewer moments where things can go wrong.
1
134
If you already own a hardware wallet, you're closer to multisig than you think. A lot of people I speak with assume that moving to Casa means starting from zero. It’s not true! On the Standard plan you bring your own device, and it becomes one of the keys of your vault. Your phone becomes the second one for example, and Casa holds a third for recovery. Here you go, a more secure 3-key vault 😊 Same hardware you already trust, but no longer a single point of failure. If that one device breaks, gets lost or turns out to have a flaw (as seen recently in multiple situations…), your bitcoin doesn't go with it. And if you'd rather not do it alone, our team can walk you through the setup live.
88
People often assume self-custody is a bitcoin-only topic. More and more of the conversations I have, especially in this region, are about stablecoins. Businesses paid in USDT. Families holding USDC as their dollar savings. Freelancers invoicing clients abroad. The risks are the same as with bitcoin: an exchange account can be frozen, a single wallet can be drained, a seed phrase can be lost. And the answer is the same too. Casa vaults secure BTC, ETH, USDT and USDC with the same multi-key setup, recovery and inheritance. Same app, same advisors. A caveat tough: stablecoin issuers can freeze tokens at their end. Multisig protects you from losing your keys, not from the issuer.
3
2
165
When someone calls Casa, it's sometimes because things are not going well. A lost phone. A hardware wallet that won't turn on. A message that looks like it's from us but isn't. And, occasionally, something more serious. That's why our advisors go through a six-month training programme before they support members on their own. In a world where more and more services get automated, I'm glad this part of Casa stays very human. Software protects the keys. Our people help you make good decisions when you're stressed. Shout-out to the team 🤝
1
99
Important reminder. Your setup is what matters, solutions have been built to protect you from specific risks. Make the right choice. Happy to help if you want to choose @CasaHODL
Compromised crypto hardware is nothing new. We've seen them as far back as 2018 with counterfeit Trezor One devices being sold. @CasaHODL's security model has protected our clients against supply chain attacks since inception: docs.casa.io/wealth-security…
109
Benjamin “Bader” Ampen retweeted
We are an official Ledger reseller and source the Ledgers that we provide to our clients directly from Ledger. They are then stored in an access controlled location until being sent to Casa clients with the original Ledger packaging intact. The Ledger supply chain incident is another reason why we designed Casa to integrate with many different hardware signers and vendors - to protect against vulnerabilities from any one device.
16
3
1
111
17,748
Quick self-custody check for your Monday. Especially relevant after what started over the weekend with Ledger… (still developing) Is there a photo of your seed phrase on your phone? A note in your email drafts? A screenshot sitting in a cloud backup? If yes, your cold wallet isn't that cold anymore. The security of the whole setup is now the security of your iCloud or Google password. Same problem, in a different way, if the only copy is one piece of paper in one drawer. One fire, one flood, one house move: gone. The words need to be offline, and they shouldn't all sit in one place. That's hard to do well with a single seed, and it's one of the reasons multisig exists: several keys, in several places, none of them enough on its own (this could be the difference between losing everything from your hijacked single wallet and being safe, back to my intro point).
2
2
158
Something I've noticed doing both sales and coaching: the best conversations in both are the ones where I talk the least. On a good discovery call, the prospect tells me what actually worries them, not what they think I want to hear. In a good coaching session, the client hears themselves say something they hadn't quite put into words before. In both cases, the work on my side is mostly this: ask a real question, then stay quiet a little longer than feels comfortable. It took me years in management to learn it. Leading large teams, I was usually the one expected to speak first and have the answer. Coaching taught me that the most useful thing I can bring is space. Still practising. Some days better than others.
150
Benjamin “Bader” Ampen retweeted
Multi-vendor multisig means you don't have to rely on just one hardware device manufacturer, so your bitcoin stays protected even if one of your devices has a security issue You can get started with hardware you already own and your mobile phone in less than 5 minutes. When Coldcard’s flaw surfaced in August, Casa multisig vaults with Coldcard wallets were unaffected. blog.casa.io/an-introduction… More resources on multi-vendor multisig in the comments.
Replying to @lopp @CasaHODL
Any thread or writeup about how to setup multi vendor multisig wallet?
6
5
1
23
6,090
Benjamin “Bader” Ampen retweeted
Skip all the bullshit, all the threads people write about protecting your bitcoin and do this: Go directly to @CasaHODL that’s it. You’ll need a @Trezor but I’m telling you when I started using them in 2019/20 for Bitcoin I couldn’t even move my coins. Let alone a hacker lol
13
10
216
36,175
Benjamin “Bader” Ampen retweeted
Two-factor authentication requires every factor. Lose your 2FA or password and you could be locked out alongside any attackers. Multisig vaults run on a threshold. In a 3-key vault, any two keys can sign, and the third is your margin for error. Phish one key or destroy one, and you can still move your bitcoin. Full primer on threshold security: blog.casa.io/an-introduction…
4
2
5
3,113
Benjamin “Bader” Ampen retweeted
Casa is an authorized reseller for hardware; we receive bulk shipments directly from manufacturers and store them securely before reshipping. But it's also optional to even use hardware provided through us - you're welcome to source your own hardware directly from manufacturers.
1
1
5
849
Benjamin “Bader” Ampen retweeted
Multi-vendor multisig protects you against supply chain attacks. @CasaHODL users unaffected. xitter.gq/Ledger_Support/status/…
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses. Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
14
10
2
143
19,154
Here we go again …
⚠️ Beware if you use a Ledger hardware wallet, especially if you bought one recently. Based on information so far, it seems to be localized to a supply chain attack with one vendor. A small number of people probably bought fake (or tampered) Ledgers. Ledger is one of the most secure and oldest hardware wallets in the industry. Stood the test of time. But these things happen. I expect and know all BNB ecosystem players (and all industry) to help trace and recover the funds.
112