pull down to refresh
0 sats \ 0 replies \ @panicsell OP 13h \ parent \ on: Wallet-stealer malware on macOS: here’s what I built to solve it privacy
Fair enough. Not open-sourcing from day one isn’t about hiding anything malicious; it’s just me being a perfectionist about code quality and avoiding ‘script kiddie’ exploits while things are still raw. No one should trust a new closed-source security tool, especially one that touches wallet files.
If anyone wants to audit or review, I can provide limited source or walkthroughs privately for now. Full open source is the plan after v1 beta feedback and tightening up anything stupid I missed as a solo dev.
Not trying to ‘hide’ - just not ready to defend half-baked code in public yet.
If that’s a dealbreaker, 100% respect that, app’s not for you (yet).
No promises - if you don’t feel safe, definitely don’t install. I’ll work on getting a minimal version open sourced ASAP. Until then, treat it like a curiosity or don’t touch it at all.
Main reason for closed-source: I’m paranoid about leaking stuff that could be exploited, and the code is still a mess. I plan to open-source once the core is stable and not embarrassing.
People on Stacker News have no interest in MetaMask, Rabby, Phantom etc... This is a Bitcoin-only space. Maybe try r/Cryptocurrency instead?
Fair enough. I’m coming from the EVM/Solana world where most of the wallet-stealer malware is hitting browser extension users, so that’s where I started.
But the tool also supports desktop wallets (Electrum, Atomic, Exodus, Ledger Live, Sparrow, etc.), if there's interest in adding some particular wallets, happy to prioritize that and would love feedback on threat models or what you actually care about protecting.
It's shady to offer a dmg without source code for something like this.
I plan to open source the code as soon as the core design and approach stabilizes (I want feedback first, and don’t want to publish something half-baked).
For now, I get that asking anyone to run a closed-source security tool is a huge trust leap, which is why the beta is free, fully local, and I actively invite people to tear it apart, reverse it, or even audit it however they want.
I actually looked at Branta a while back, but couldn’t find a working Mac build (let alone something local/offline). Totally agree, feels like there have been a bunch of starts but not much follow-through, if anyone knows who’s shipping or has feedback, would genuinely appreciate intros or thoughts.
I’m honestly building this to scratch my own itch, but open to talking with anyone who’s tried solving it (or failed and learned something).
GENESIS