Assets
Ranked by what their loss costs you.
| Asset | Loss means |
|---|---|
| Seed / master private key | Total, irreversible loss of funds |
| BIP-39 passphrase | Total loss of the wallets derived under it |
| Signing authority (the ability to make the device sign) | Loss of funds, bounded by quorum |
| Extended public keys and descriptors | Loss of privacy: full transaction graph and balance history |
| Transaction intent (who you are paying, how much) | Loss of privacy, and targeting information |
| The device's integrity claim (manifest root hash) | Loss of the ability to detect any of the above |
| A backup file that carries a seed | Total loss of the wallets in it, under one passphrase rather than under the mnemonic |
| A BIP-85 child seed | Total loss of that child, and it is derivable by anyone holding the parent mnemonic |
The last row is why the verification system exists. If an attacker can make you believe you are running verified code when you are not, every other defence in this document is theatre.
Rendered from docs/THREAT-MODEL.md, the same bytes that ship with the code. SHA-256 d932f13db7fe836f45194ab98069c47dc556d4f29b2cfbf0ef1ab3bf7b334ffd