Safe Labs CEO 谈加密货币自托管：是否为初学者设计？
Was crypto self-custody ever designed for beginners?
Safe Labs CEO Rahul Rumalla 认为自托管加密货币并非专为初学者设计，而多签名钱包和无需备份等方案在安全性和易用性方面存在权衡。他认为简化自托管可能对比特币的更广泛采用至关重要。同时，Ledger 和 Coldcard 等硬件钱包的安全漏洞也引发了人们对自托管安全的关注。
Crypto executives are divided over whether self-custody was ever designed for beginners, while approaches such as multisignature wallets and seedless backups come with their own security and usability trade-offs.
“We don’t expect every driver to be a mechanic, and we shouldn’t expect everyone who wants to own their assets to become a security expert,” Safe Labs CEO Rahul Rumalla told Cointelegraph.
Making self-custody easier to use could be critical to Bitcoin’s broader adoption, as the ability to “be your own bank” remains one of its defining features.
Recent incidents involving Ledger and Coldcard have exposed weaknesses in hardware wallets, widely recommended as one of the safest ways to hold crypto because they keep private keys offline.
Implants in some Ledger devices stole recovery phrases, while a Coldcard firmware bug allowed attackers to recreate private keys and steal funds.
Related: Ledger’s early implant warnings deserved more action, Karpelès says
Michael Tanguma, CEO of Bitcoin custody provider Onramp, compared Bitcoin custody to personal computers in the 1970s, when users needed technical skills to assemble and operate them.
“Self-custody was never designed with newcomers in mind,” he told Cointelegraph.
He said simpler designs helped computers reach a wider audience and that Bitcoin custody now faces a similar challenge.
Rumalla disagreed, saying self-custody was “always meant for everyone” and that “being able to own and control your assets is the whole point of crypto.”
He added that self-custody “does not mean doing everything yourself.”
Multisig improves security, but not without a cost
Multisignature, or multisig, wallets require multiple keys to authorize transactions, but managing them can be difficult for beginners.
“Traditional multisig implementations can introduce additional complexity involving signer coordination, key backups, recovery procedures, and transaction approvals,” Justin Hutzler, chief technology officer of Synergy Network, said.
Multiple approvals also cannot prevent every attack.
Safe Labs’ Rumalla said several signers could still authorize a malicious transaction if they were all deceived by the same compromised interface.
Related: Can crypto users trust the supply chain behind hardware wallets?
Seedless wallets remove one risk, introduce others
Tangem says its seedless design simplifies self-custody by removing the need to manage a recovery phrase. Users must instead safeguard the physical devices that provide access to their funds.
A private key is generated on one card, with backup copies stored on up to two additional devices. Tangem confirmed to Cointelegraph that losing every device would permanently lock users out of their funds.
The company said it had received no reports of users losing all their cards.
Keeping the cards safe also does not protect users from approving a malicious transaction. Zach Herbert, CEO of rival hardware wallet maker Foundation, said seedless backups can preserve self-custody, but criticized Tangem’s lack of a built-in screen, which leaves users relying on their smartphones to verify transaction details.
“An attacker does not need to extract your private key if they can trick you into authorizing a transaction that empties your wallet,” he said.
来源：Cointelegraph · cointelegraph.com