Bitcoin wallet security is a matter near and dear to all Bitcoin enthusiasts around the world. Software clients are not as safe as we think – simply because they run on a device connected to the internet, making it a target for hackers – and hardware solutions are slowly gaining more adoption because they “feel more secure”. But if you ordered a Mycelium Entropy device, your hardware Bitcoin wallet may not be as secure as you think.
Proof of Tampering During Shipment
An interesting piece of news popped up in my Twitter feed earlier today, discussing how several customers have received a Mycelium Entropy Bitcoin hardware wallet with a broken hologram seal. As you will most likely be aware of by now, this hologram ensures that that your device has not been tampered with from the time it was packaged to the time it arrived at its destination.
However, if your seal has been broken – in this case during transit – it means that someone may have tampered with your Bitcoin hardware wallet. If this were to be one single complaint, there would be no reason for concern. But by the look of things, this appears to be a very deliberate course of action. The only question is: who is responsible?
Post Offices To Blame?
At the time of publication, we have received two separate reports confirming a broken hologram on their Mycelium Entropy wallet. The first report came from a user on Reddit – by the name of literarydevice – stating how Canada Post makes claims of a “damaged product”, which they then “tried to repair”.
As can be seen on the images posted here, it is quite clear the Mycelium Entropy hologram has been broken by postal agents, and they even did their best to make it look like the device had never been opened in the first place. Furthermore, Canada Post agents even went as far as carefully reassembling the original package.
Needless to say, no one believes that weak excuse by Canada Post. If they scan a package which appears damaged, they will hardly take the time to “repair” it before sending it your way. They will likely open the package – as they are allowed to do – and see what’s inside. Looks like something fishy is going on here folks.
Roger Ver Comments
One report on Reddit from a random user is not much proof to go by on. But when Roger Ver – Bitcoin Jesus himself – reports the same issue [even though he resides in Japan and not Canada] things start to become a whole lot more interesting. In fact, Roger Ver reported exactly the same issue: a broken tamper-proof hologram seal and a nearly identical letter from the Kawasaki post office.
According to the letter included in Roger Ver’s package, the item was also damaged and “repaired” by the postal office. Additionally, the Kawasaki post office “deeply regrets he had to receive the package in this condition.” Not the most genuine story, especially not if it’s nearly the same exact wording as the Canada Post uses.
Later on, someone managed to contact the Kawasaki Post Office in order to verify some details. According to a spokesperson, if the package was intentionally checked for its contents – and possible import tax assessment – the post office would use different tape and stickers. This does beg the question whether or not it was the actual Kawasaki Post Office who intercepted the package and broke the hologram seal.
Mycelium was on the ball to issue a reaction of their own to these allegations. According to a Mycelium representative, the Entropay Bitcoin hardware wallet devices are packaged in such a way they will remain safe at all times during transit. However, the aforementioned packages may have been intercepted due to “bad packaging”, which is a possible scenario.
Things get a bit hazy when Mycelium changed their story shortly afterwards, claiming “many more packages may have been intercepted by customs agents”, as there is apparently a “hunt for kiddy porn” going on. Make of that explanation what you will….
All images courtesy of Pixabay