Your Bitcoin Security Has a Physical Layer

We spend a lot of time talking about seed phrases, hardware wallets, multisig, passphrases and air-gapped devices.

But there is another attack surface we sometimes forget:

The human body.

Jameson Lopp’s Physical Bitcoin Attacks database documents real-world incidents involving people targeted because they were believed to control Bitcoin.

The lesson isn't that Bitcoin is insecure.

The lesson is that self-custody changes the threat model.

A 24-word seed can survive a malware infection. A hardware wallet can resist remote attacks. Multisig can eliminate a single point of failure.

None of them can stop someone from discovering that you own Bitcoin and putting a wrench to your head.

That's why operational security matters.

Don't unnecessarily advertise your holdings. Don't make your identity and Bitcoin wealth easy to connect. Think carefully about backups, inheritance, geographic separation and who knows what.

And remember: privacy is part of security.

Bitcoin gives you the ability to control your own money.

That freedom comes with responsibility—not just for the keys, but for protecting the person who holds them.

Trust less. Verify more. And don't become your own biggest attack surface.

Study the Physical Bitcoin Attacks database

Jameson Lopp’s physical attack database is a brutal reminder that Bitcoin security doesn't end with a seed phrase, hardware wallet, or multisig. The database documents years of robberies, kidnappings, extortion and home invasions targeting people believed to control Bitcoin. It also explicitly notes that the list is incomplete because many attacks are never publicly reported.

Your biggest security vulnerability might not be cryptographic.

It might be you.