pull down to refresh

Just got started with Bitcoin Knots version v29.1.knots20250903.
But is it only a node or can it also be a trustworthy wallet? The reason behind this question is the recent Javascript attack on manipulating the transaction addresses to steal Bitcoins.
Here is the scenario. Some of my Sats are in the Blockstream Green wallet (AppImage) running on my Ubuntu 24.04 laptop. The laptop itself is regularly patched, updated, nobody else uses it, has no other applications than open source or those available from apt-get repository, and never connected to anything other than my home WiFi. In other words, I am extremely confident it is as clean as I can expect it to be.
But I gather than Blockstream itself is now vulnerable because of the attack? So I cannot use it anymore? I want to move my funds to a cold wallet and wondering the best way to do it.
So the questions are
  • Can I use the BIP 39 words to restore the wallet on Bitcoin knots to spend them?
  • Is Knots itself still safe to run or does it have a dependency on those nasty libraries or malwares?
If not, what would you do to recover the funds from my Blockstream Green before they are gone?
Restoring with BIP39 words: Bitcoin Knots doesn’t directly support BIP39 seed phrases. However, you can convert the seed into private keys using external tools and then import them into Bitcoin Knots. This process requires care and technical knowledge to avoid mistakes. Safety of Bitcoin Knots regarding JavaScript attacks: Bitcoin Knots is built in C++ and doesn’t rely on JavaScript libraries or environments that are typically targeted by such attacks. As long as you use trusted binaries and run it on a clean system, it remains secure. Recovering funds safely: Export your private keys or seed securely, preferably while offline. Moving the funds to a cold wallet like a hardware wallet is the safest option. If you choose to use Bitcoin Knots, ensure you carefully convert and import the keys, verifying each step to prevent loss. That's what I think
reply
Thanks a lot for the answer. If you do not mind a follow up, are the funds safe at rest for now, until I try to move them?
Is there a possibility the wallet makers will release a patch to defend against this vulnerability?
reply
Are the funds safe at rest for now? Yes, your funds should be fine as long as you’re not sending transactions. The issue mainly happens when you create or approve a transaction — that’s when attackers could try to manipulate it. So if you’re just holding your Bitcoin and not making any transfers, there’s no immediate danger. Will the wallet makers fix this with a patch. Most likely, yes. Developers usually respond quickly to vulnerabilities like this, especially when they’re public and can affect many users. I’d expect them to release updates or patches soon to fix the issue. Still, it’s smart to be cautious, avoid sending funds until the fix is out, and get ready to move them to a safer setup when you can. Kinda yes do lemme know if you wanna monitor patch or when it's released
reply
Bookmark these 2 web tools with the information about all types of wallets and how to recover/convert:
reply