Key rotation in non-custodial systems: when and how should crypto keys be replaced?
Replacing a crypto key is not always a simple rotation: wallets, multisigs, smart accounts and validators require different migration procedures.
4 articles
Replacing a crypto key is not always a simple rotation: wallets, multisigs, smart accounts and validators require different migration procedures.
An update can fix a device without fixing secrets already created. Understanding that limit prevents a false sense of security.
A wallet migration should reduce risk, not move it elsewhere. Here is a careful method for changing seeds and transferring funds.
The COLDCARD incident combined a pseudorandom fallback, insufficient tests and a 32-bit reseed. Technical analysis and migration guidance.