Hardware Security Review
Perform a read-only review unless the user separately requests fixes.
- Define reviewed refs/files, device families, protocols, transports, and threat boundary.
- Read wallet session and security plus the relevant architecture/protocol/chain documents from the docs index.
- Trace untrusted input through validation, serialization, device confirmation, response parsing, error handling, retry, logging, and persistence.
- Check for secret exposure, confirmation bypass, wallet/session confusion, unsafe retry, protocol downgrade, stale connection data, non-deterministic signing data, and dependency risk.
- Distinguish proven findings from hypotheses. Include file/symbol, exploit precondition, impact, evidence, and focused remediation.
- Require regression tests for any confirmed security fix.
Never reproduce or print real secrets. Use synthetic fixtures and public test vectors.