ZachXBT vs. Trezor: Hardware Wallets are “Trash”, Use an iPhone

Famous blockchain investigator ZachXBT sparked a new debate in the crypto world after labeling hardware wallets as “trash” and recommending the use of an iPhone, prompting a security-focused technical defense from Trezor executive Danny Sanders.

ZachXBT, one of the most prominent names in cryptocurrency security, criticized the clunky nature of hardware wallets and argued that these devices should not be used for important transactions. The researcher claimed it is more logical for users to use a dedicated iPhone solely for storing funds and signing transactions. This radical stance was met with counter-arguments from Danny Sanders, Chief Commercial Officer at Trezor, one of the industry’s giants.

While Sanders acknowledged that hardware wallets sometimes offer “clunky” solutions and that updates can disrupt urgent transactions, he characterized ZachXBT’s criticisms as a “generalization.” Stating that navigating the fine line between security and usability is difficult, Sanders emphasized that hardware wallets remain the strongest self-custody method available for the average investor.

Attack Vectors and Security Risks in Smartphones

At the heart of Sanders’ defense are the attack vectors inherent in an iPhone. Emphasizing that features such as Wi-Fi, Bluetooth, iMessage, and cellular connectivity leave the device vulnerable to external threats, the executive stated that generating private keys on a phone is far riskier than on a hardware wallet. Furthermore, the fact that hardware wallets possess an independent screen—allowing for the physical verification of transaction details before signing—is cited as the most critical component of security.

Tornado Cash co-founder Roman Storm joined the discussion, partially supporting ZachXBT while highlighting deficiencies in mobile wallets. Storm expressed that the real issue in the mobile world is the lack of BIP39 passphrase support and the ability to sign transactions while offline (air-gapped). Stating that these features can protect funds even if physical backups are stolen, Storm reminded that security is achieved not just through hardware, but through the correct implementation of technical protocols.