If only 2 cards can access my coins then I need to protect the cards too, so if I lose 2 cards that means I lose my coins, and if I need X1 Vault with one of the cards then there is a central point of failure which is X1 Vault.
In addition, NFC is a short-range wireless connectivity which adds more problems because of wireless connection.

Can I extract wallet seed from the X1 Vault?


Does this mean that it is similar to Ledger Recovery but is non-KYC? I advise any HW service to stay away from the complications of inheritance or the possibility of the user recovering his seed because it means that a third party will keep part of encrypted seed, which contradicts all the concept of hardware wallets.

It means no single point of failure in private key storage. The only point of failure comes when the user is actually transacting with the X1 Vault and the card. Even in that case, the private key only exists in the temporary memory during transaction signing and the private key as a whole never touches the permanent storage. Also in most multisig wallet cases, if a single user is operating it, whether we like it or not, the user is using 2 wallets at the same time at the same place which defeats the purpose of multisig. And again, we are trying to build the best possible wallet for securing a single seed. You are free to use Cypherock X1 as part of a multisig wallet setup as well. Rather than comparing us with multisig wallets, a fair comparison is actually other hardware wallets.


We are building an open source Android and IOS apps that will do this. Here is a sample prototype for the same. Regardless, if you have the X1 Vault, you can always view the seed phrase with the help of another card. Also, we have answered this question on our FAQ page - https://cypherock.com/faq


Never did we say that this was enough. Compromising the device to steal the assets is not enough since the user will still need to use the cards along with the device atleast once. The PIN protection on the card is separately enforced on the card itself and the card have end-to-end encrypted session-based communication with the device. Which means, it also authenticates the device during communication.

By no means this is perfect but we think it adds a barrier against an insider attack. Additionally, we are open source and the firmware builds have been verified by Wallet Scrutiny - https://walletscrutiny.com/hardware/cypherockx1/

---

There is a PIN protection on card also individually if set which protects against cases of collusion. You can lose upto 3 hardware components and still be fine since you can recover the assets from device + card or 2 cards. So no, you don't lose your coins if you lose 2 cards. Answering along the similar lines as I answered before, the only point of failure comes when you are actually transacting with the X1 Vault and the card. Even in that case, the private key only exists in the temporary memory during transaction signing and the private key as a whole never touches the permanent storage.

If you are comparing to multisig, in most multisig wallet cases, if a single user is operating it, whether we like it or not, the user is using 2 wallets at the same time at the same place which defeats the purpose of multisig. And again, we are trying to build the best possible wallet for securing a single seed. You are free to use Cypherock X1 as part of a multisig wallet setup as well.


There is encrypted NFC communication session established between the device and the cards before any sensitive message is exchanged. Not sure what the concerns are then. Also, I personally don't get the point of rallying against wireless connectivity. A hardware wallet is built keeping a threat model in mind. Atleast for Cypherock X1, we assume your PC and its communication medium with the wallet both are compromised and still the hacker should not be able to compromise the assets until you physically authorize a particular transaction.


No. The wallet seed is never permanently stored on the X1 Vault.


No. The seed will NEVER leave the secure hardware environment in our case ever. More on this soon when we release the specs on the same.

---

I agree, this is definitely one of the things we realize the industry needs badly. Our implementation is open source and we hope it gets adopted and standardized further. When we started building Cypherock X1, we looked into Trezor's implementation of Shamir backups but concluded that any implementation that is going to scale, needs to be BIP39 compatible to be adopted. Hence we had to develop our own implementation.

Though I don't think the lack of standardization is going to result in single point of failure. The code is always open source and BIP39 compatibility makes your seed interoperable with other wallets.

Regardless, you can always pair it with Multisig to standardize your key custody if that helps.

[moderator's note: consecutive posts merged]

No problem, but I am not supporting anything, I just tried to help with answering a question you asked me in private about old ANN topic and inactive member Nmnsth
Before asking any questions here everyone should also check the old topic.
That old topic should be locked now, and I reported it to moderators.

Cypherock X1 certainly have some interesting features, like ability to use it with multiple see phrases, and using multiple cards is not a bad idea compared to other hardware ewallets.
However, at this point I think Cypherock X1 is not fully ready to be used as main hardware wallet, unless you made some significant improvements from last time I checked.
Lack of support for Electrum and other third party wallets was one of the main deal breakers for me.

Here is what I don't like at Cypherock X1 wallet, other than lack of support for Electrum (Sparrow wallet and other third party wallets) and multisig setup.
Price is a bit more expensive than other alternative hardware wallets, there is no support for full Bitcoin node, no signing messages, one account for coin, no coin control.
ATECC608A secure element is a bit outdated and it has some security issues, so it probably should be updated with newer model.
I am not saying Cypherock X1 is bad, but I never used it and I can't really say more about negative/positive things.

Hi, we added Cypherock X1 to our website, so you can compare it against other 39 hardware wallets.

https://thebitcoinhole.com/

Obligatory questions.

1) Where is the device made?

2) Where are the cards made?

3) What security do you have in place to prevent supply chain attacks?

4) What security do you have in place to prevent device attacks?

I have a bunch of reasons not to like ColdCard. BUT they really did it right in the fact that their devices are transparent. If you take it apart and tamper with it there is at least the chance I may notice it.
With all the other 'black boxes' there is a much smaller chance.

But, I do like SSS. Others may not, but I have been using it on and off for years.

-Dave

Cypherock X1 now ships with a Hard Case - https://twitter.com/CypherockWallet/status/1719697106984972728

• Comes FREE as part of the packaging
• Is a Faraday Cage to protect against unintended EM waves
• Use it to keep other hardware wallets along with your Cypherock X1 safe against scratches
• It is Dust & Water Resistant

Makes sense. Thanks.