Nostr notes by Gart_io

Harden your security. Take action today. Everything below takes ...

2026-10-22T16:27:27Z

Harden your security. Take action today.

Everything below takes an afternoon:

1 - Decide in advance who needs to be alerted if something happens

2 - Tell them what to do: who they call next, and what stays private

3 - Setup a private and reliable alert system for your home

4 - If you hold crypto, use multisig or a time delay, so no single visit can move everything

Gart does the first and second step from your phone. Set your safe contacts, alert message and protocol once, and a silent press-and-hold sends them when you need it.

https://gart.io/app

France is now the #1 country with the most publicly reported ...

2026-10-12T16:54:30Z

France is now the #1 country with the most publicly reported cases.

Including this one, 15 attempts were unsuccessful.

We break down the 46 cases that happened in 2026 so far on our database https://gart.io/stats

#crypto #opsec #security

quoting
nevent1q…0lgn
📰 Agression crypto dans le Tarn : braqué en pleine nuit à 22 ans, il fait fuir ses agresseurs et revend tout

#cryptomonnaie #bitcoin #rwa #defi #lejournalducoin

https://journalducoin.com/actualites/agression-crypto-tarn-braque-22-ans

The one giving the orders is not the one getting their hands ...

2026-10-09T15:18:06Z

The one giving the orders is not the one getting their hands dirty.

The pattern:
- France, Oct 2025: three masked men in the house, the organizer directing them by live video call from abroad.
- Brentwood, California, Dec 2025: two men on site, a third voice on speakerphone through a voice modulator.
- Mulhouse, March 2026: trio in the house, fourth man on the phone walking them through the transfer.
... and more.

Twice this year in France they didn't even have the right house. The list they were working from was years old.

40 attempts in our database failed.
An alarm went off, neighbourgs called the police, cameras, dogs... in several of these cases, those were the difference between failure and success.

If you use your cards right, you can dodge them too, or become too hard to get.

We help people improve their security posture.
https://gart.io/training

🚨UK warning: fake police calls are hitting people 3–4 times ...

2026-09-24T15:43:22Z

🚨UK warning: fake police calls are hitting people 3–4 times a week. Caller ID shows a genuine police number because it's spoofed.

They know your full name and home address. They're calm, confident, well spoken and sound exactly like officers.

The script: "We're investigating, we've found your financial information, we need to verify some details." Ask for a badge number and they'll give one. But it's fake.

Red flags:
- "Don't tell friends or family, it could compromise the operation"
- "This call is being recorded" when you push back
- Questions about crypto accounts and bank details.

Refuse and it turns sinister. One person was threatened with armed police sent to their home on a hoax report. They had to call 999. Being scam-aware doesn't make you immune. The pressure is real.

What to do?

1. Hang up. Caller ID proves nothing.
2. Call 101 from a different phone, or wait 10 minutes first.
3. If you're threatened, call 999.
Real police will never ask for crypto or bank details over the phone, or tell you to keep it from family.

4. If you hold any crypto (even small amounts) or your personal details are already circulating, Gart runs private security advisory.

DM us to book a call or in-person session.
https://gart.io/training

#news #security

No notes, no Zoom, bitcoin accepted. Gart goes off the record. ...

2026-09-18T15:04:09Z

No notes, no Zoom, bitcoin accepted. Gart goes off the record.

We are ending public workshops.
From now on every engagement is private: one client, or the circle they choose, and us.

The open format worked.
It also put strangers in one room to discuss where they live, how they travel, and what is at stake. Most people held back. Sensibly.

What replaces it: executive, family, and private group training, in person, plus remote advisory on a call server we host ourselves.

No notes kept, no recording, no file on you. Invoice only, bitcoin or wire.

Read more:
https://gart.io/blog/gart-blog-1/gart-drops-public-workshops-to-go-fully-one-on-one-17

In January this year, a streamer in Sweden was beaten and doused ...

2026-09-14T14:55:11Z

In January this year, a streamer in Sweden was beaten and doused in gasoline by attackers who were sure he was rich in crypto. He had none.

Months after, he came out to tell the story.

They picked him for one reason: he was visible, and visible looks rich.

Your balance can stay private. Your public profile usually can't. What would a stranger reading yours guess you're worth?

Attackers don't act on what you hold. They act on their guess ...

2026-09-11T18:27:25Z

Attackers don't act on what you hold.

They act on their guess at it, built from leaked databases, breach dumps, and whatever you show in public.

On 24 August, 2026, in Jouy-en-Josas, France, three men broke into a 47-year-old's home at dawn, tied and gagged him, and beat him for about two hours for his crypto codes.

They were sure he held close to EUR 6 million. His wallets held about EUR 3,000.

The men at the door were working from bad data. What in your public footprint is feeding someone else's guess?

Full report:
https://gart.io/stats#case-47-y-o-male-france-august-24-2026

Most location and safety apps keep you safe by watching you. They ...

2026-08-21T15:13:27Z

Most location and safety apps keep you safe by watching you.

They log where you go and sell the pattern.

Gart was built as a safety app that protects you by knowing nothing about you: no account, no tracking, no company that can be made to hand over what it never held.

alenasatoshi (npub1ymx…6hd8) and the team explain why the whole category is a surveillance problem, and how a truly private alert actually works.

The full session is up on YouTube: https://www.youtube.com/watch?v=rmUPK4kErwk

There is a way to pull your location and account data from a ...

2026-08-19T19:55:36Z

There is a way to pull your location and account data from a company like Apple or Meta without a warrant.

It isn't a hack of their systems.
It's a forged police email.

It's called an EDR or emergency data request.
Providers are built to answer them fast, no warrant, because the claim is "a life at risk".

You cannot patch a legal process. Which is why an app that stores your movements is a liability, however much you trust the company holding them.

Gart keeps you safe by knowing nothing about you.
By design.

Download Gart: https://gart.io/app

When your home address leaks, what is your plan? We have seen it ...

2026-08-17T21:15:15Z

When your home address leaks, what is your plan?

We have seen it over and over. Someone breaks into a third party that holds the order data and walks away with the link between who owns Bitcoin and where they live.

Assume your data is already out there. Then make deliberate choices about the safety of your home and your family.

Educate yourself in situational awareness, home security, travel habits, and the response protocols worth having ready before you need them.

At the Gart workshop we go through these protocols and shape them around your situation, with a trainer who's also a bitcoiner and a family man himself, and knows what is at stake.

Join us for the next one in Lugano on October 21.

https://gart.io/event/gart-workshop-plan-b-forum-lugano-2026-4/register

You can secure your keys perfectly and still get robbed at your ...

2026-08-11T17:14:12Z

You can secure your keys perfectly and still get robbed at your own front door.

On August 3, three people broke into a home in France looking for crypto. They were caught mid-search because someone saw it coming.

Most holders build the digital layer and stop there. Cold storage, multisig, the hardware wallet in a drawer. The keys are not the weak point here. The front door is.

What stopped it in this case was advance warning. Someone knew enough to act before the search turned into a confrontation.

Secure the keys.
Then secure the room they are in.
Then yourself.

Find this case's details, sources and more cases like this in the largest database of physical attacks involving cryptocurrency:

https://stats.gart.io/#attack-469

Multisig's strength is diversity. You spread trust so that no ...

2026-08-07T20:39:29Z

Multisig's strength is diversity.

You spread trust so that no single failure can take everything.

This is what defense in depth means in practice: several independent layers, so one break does not sink the rest.

With multisig, each key can live in a different place, on hardware from a different manufacturer, built from a different source of randomness.

Two days before the Coldcard news, we ran a webinar in partnership with npub1klkk3vrzme455yh9rl2jshq7rc8dpegj3ndf82c3ks2sk40dxt7qulx3vt Hillebrand from Sound Money Solutions on "Multi-signature wallets and timelocks".

Check the full session on our Youtube channel:
https://youtu.be/UPd-bTE6GPk

Unfortunately, the app needs all these permissions. Otherwise, it ...

2026-08-06T18:35:32Z

In reply to nevent1q…0ez4
_________________________

Unfortunately, the app needs all these permissions. Otherwise, it wouldn't fetch your location, show incoming alerts, etc...

It wouldn't make sense to start asking for them in a situation where you just want to trigger the alert button.

The permissions are a one time thing. Set them at login, then go to Settings > Alert settings and allow the two more you see there, and you're good to go.

If you need any advice on the use, let us know. Or try our user manual: https://gart.io/user-manual

We recorded a webinar yesterday about it. It goes into detail about all the design decisions. We'll be sharing the recording soon.

Two days before the Coldcard news, we ran a webinar in ...

2026-08-05T17:30:04Z

Two days before the Coldcard news, we ran a webinar in partnership with Sound Money Solutions on the exact weakness it exposed: trusting a single hardware wallet maker with everything.

Over $100 million drained, 1,596 BTC across 7,300+ addresses, and still climbing.

One vendor, one point of failure.

Split your funds behind several keys, each on hardware from a different maker. If one maker's devices are compromised, or just get something badly wrong, no single flaw can move your coins.

Today, LIVE webinar about Gart app. Join to share your feature ...

2026-08-05T04:06:39Z

Today, LIVE webinar about Gart app.

Join to share your feature requests, ask questions and see what is upcoming in our development.

2pm UTC

quoting
nevent1q…ucss
If your safety app got breached tomorrow, what would the attacker walk away with?

For most, a year of your movements, your contacts, your daily pattern.

For Gart, nothing. No KYC, no central server, no location history. Nothing to seize and nothing to sell.

On August 5 we'll tell you how that works, and why we built it that way.

Webinar: the Gart app.
Free session, live Q&A, with our founder and the team who built it.
August 5, 2 PM UTC.
Limited spots.

https://gart.io/event/webinar-the-gart-app-15/register

Hm that's strange, we've tested this on multiple devices ...

2026-08-05T04:02:48Z

In reply to nevent1q…qh9g
_________________________

Hm that's strange, we've tested this on multiple devices and couldn't reproduce. Could you please shake phone when that happens and send us a report + attach a log? We will investigate.

How do you protect yourself, your family, and your assets in a ...

2026-08-04T20:47:22Z

How do you protect yourself, your family, and your assets in a world that gets increasingly uncertain?

What once took a surveillance team now takes a laptop and a few hours: old data leaks, public posts, wallets anyone can trace.

Make privacy a professional habit.
Build awareness, skills, and protocols.
Use practical, privacy-first tools and stay in control.

Just three words:
Stealth. Ready. Smart.

Learn about how we think of personal security and what Gart's tagline actually means: https://gart.io/blog/gart-blog-1/stealth-ready-smart-8

Thanks for flagging this. The technical team looked into it, and ...

2026-07-29T18:34:03Z

In reply to nevent1q…ayuc
_________________________

Thanks for flagging this. The technical team looked into it, and the fix has been merged. The new release will allow you to log in normally. Coming later this week.

Join us next week to learn how Gart works and why we built it: https://gart.io/event/webinar-the-gart-app-15/register

Attackers need your money to move right now. Two setups put a ...

2026-07-28T18:40:58Z

Attackers need your money to move right now.

Two setups put a key, or a clock, in the way. We show you both tomorrow.

Multisig means it takes more than one key to move your funds. One threatened person is not enough. A timelock means the money cannot leave until a set time passes.

Nothing goes on the spot.

Gart Webinar: Multi-signature Wallets & Timelocks.
Tomorrow, Wednesday, 2 PM UTC.

Hosted by Max (npub1klk…x3vt) Hillebrand from Sound Money Solutions.
Free, one hour, live questions.

quoting
nevent1q…q3px
A wrench attack runs on one assumption: that one person, under enough pressure, can move everything.

Multisig takes that apart.

No single signer can send the funds, so no single person can be forced to. A time-locked key cannot sign yet, so there is nothing in it to take today.

None of this makes you less of a target, but it removes the single point they can break.

On July 29, we walk through building custody with no single point of coercion.

Gart Webinar: Multisig wallets and timelocks,

Held by the Sound Money Solutions team, led by Max (npub1klk…x3vt) Hillebrand.

July 29, 2:00 PM UTC. Limited seats.
Register: https://gart.io/event/gart-webinar-multi-signature-wallets-timelocks-12/register

Good news, we already support signing in with a signer like ...

2026-07-28T18:40:51Z

In reply to nevent1q…vawj
_________________________

Good news, we already support signing in with a signer like Amber.

We also built it so you're not stuck approving every signature at exactly the wrong moment. Gart uses a small separate identity for in-app actions, signing them in the background, so your real key stays put in Amber and nothing slows you down.

Give it a try and let me know if Amber connects well for you.

Exposure comes from what you broadcast and what leaks about you. ...

2026-07-24T17:12:45Z

Exposure comes from what you broadcast and what leaks about you.

You control the first, but not the second.

In 2025, a French tax officer was caught selling crypto holders' home addresses and capital gains to criminal gangs. We don't know how long the data had been moving before she was caught, and crews can plan for days to months before acting.

Over that same window, the France case reports we found went from roughly one a year between 2017 and 2024, to 21 in total for 2025.

Comparing January to June only, France went from 10 cases in 2025 to 31 in 2026. A 210% jump.

Assume you're already on a list and build the habits that make you harder to reach regardless.

For more details, check the largest database of physical attacks involving cryptocurrency:
https://stats.gart.io

A wrench attack runs on one assumption: that one person, under ...

2026-07-23T13:40:29Z

A wrench attack runs on one assumption: that one person, under enough pressure, can move everything.

Multisig takes that apart.

No single signer can send the funds, so no single person can be forced to. A time-locked key cannot sign yet, so there is nothing in it to take today.

None of this makes you less of a target, but it removes the single point they can break.

On July 29, we walk through building custody with no single point of coercion.

Gart Webinar: Multisig wallets and timelocks,

Held by the Sound Money Solutions team, led by Max (npub1klk…x3vt) Hillebrand.

July 29, 2:00 PM UTC. Limited seats.
Register: https://gart.io/event/gart-webinar-multi-signature-wallets-timelocks-12/register

If your safety app got breached tomorrow, what would the attacker ...

2026-07-21T16:46:42Z

If your safety app got breached tomorrow, what would the attacker walk away with?

For most, a year of your movements, your contacts, your daily pattern.

For Gart, nothing. No KYC, no central server, no location history. Nothing to seize and nothing to sell.

On August 5 we'll tell you how that works, and why we built it that way.

Webinar: the Gart app.
Free session, live Q&A, with our founder and the team who built it.
August 5, 2 PM UTC.
Limited spots.

https://gart.io/event/webinar-the-gart-app-15/register

If you couldn't be in the room, who could reach your coins, ...

2026-07-14T16:37:47Z

If you couldn't be in the room, who could reach your coins, and how long would it take them?

Tomorrow, 2 PM UTC.
Registration closes soon.
Limited spots.

quoting
nevent1q…usd0
Picture the person you'd leave your coins to trying to reach them without you in the room.

They don't know if the seed is on paper or steel, whether it's whole or split, or which drawer even holds the right device.

Everything you did to keep it safe from a stranger now works against the one person you meant to have it.

Session 4 of our free Digital Security Webinar Series works through it: Backup & Inheritance Strategies

In partnership with and hosted by the
Sound Money Solutions team, led by Max (npub1klk…x3vt) Hillebrand.

What we'll cover:
- Redundancy that adds copies without adding single points of failure
- Where backups live, and who can reach them
- An inheritance path that triggers without exposing keys early
- Recovery that holds up

July 15th.
Limited seats.

Register:
https://gart.io/event/gart-webinar-backup-inheritance-strategies-11/register

A Russian restaurant owner in Uluwatu, Bali was taken on the ...

2026-07-13T17:24:15Z

A Russian restaurant owner in Uluwatu, Bali was taken on the night of July 2 as he rode home from his own restaurant.

Two masked men blocked his motorcycle, cuffed him with plastic restraints, covered his head, and drove him to a two-story building.

He was punched and kicked for close to 30 hours until he gave up the password to his crypto account.

The stop happened at a junction on that route, around 9:35 PM, on a deserted stretch with almost no camera coverage.

They took his Xiaomi phone at the roadside. His villa key was sitting on the motorcycle's dashboard, so they used it to walk into his villa and take a second phone, the one he used to reach his crypto funds.

No arrests so far.

An estimated $4.9M to $5M was taken. They let him out in front of Udayana University Hospital in Jimbaran at 4 AM on July 4.

Full report: https://stats.gart.io/#attack-460

If you handed over everything you can reach right now, what would you still own tomorrow?

Session 4 of our webinar series on digital security covers what makes backups durable, and who can reach your assets when you no longer can.

Gart Webinar: Backup & Inheritance Strategies. Presented by Max (npub1klk…x3vt) Hillebrand from the Sound Money Solutions team.

Wednesday, July 15.
Limited seats.

https://gart.io/event/gart-webinar-backup-inheritance-strategies-11/register

Picture the person you'd leave your coins to trying to reach ...

2026-07-07T15:42:54Z

Picture the person you'd leave your coins to trying to reach them without you in the room.

They don't know if the seed is on paper or steel, whether it's whole or split, or which drawer even holds the right device.

Everything you did to keep it safe from a stranger now works against the one person you meant to have it.

Session 4 of our free Digital Security Webinar Series works through it: Backup & Inheritance Strategies

In partnership with and hosted by the
Sound Money Solutions team, led by Max (npub1klk…x3vt) Hillebrand.

What we'll cover:
- Redundancy that adds copies without adding single points of failure
- Where backups live, and who can reach them
- An inheritance path that triggers without exposing keys early
- Recovery that holds up

July 15th.
Limited seats.

Register:
https://gart.io/event/gart-webinar-backup-inheritance-strategies-11/register

Yes, they are. We have another one coming up next week about ...

2026-07-06T17:31:11Z

In reply to nevent1q…grl4
_________________________

Yes, they are. We have another one coming up next week about Backup & Inheritance Strategies

https://gart.io/event/gart-webinar-backup-inheritance-strategies-11/register

The most planned attacks don't start with a break-in. They ...

2026-07-06T17:30:13Z

The most planned attacks don't start with a break-in. They start with a relationship.

Someone spends months as a real business partner, earns your trust, then uses it to move you somewhere they control. No public wallet, no leaked address. The trust is the way in.

On June 29, two women were lured to Pakistan by a business partner they'd worked with for eight months.

Upon arrival they were kidnapped, held at gunpoint, assaulted, and asked to pay a $1.5 million ransom.

One of them reached her father, who alerted police. They were rescued within about two hours.

Full report available on our database:
https://stats.gart.io/#attack-459

The most predictable thing you do all day is arrive home. Same ...

2026-07-02T15:52:38Z

The most predictable thing you do all day is arrive home.

Same spot, same time, then five minutes in the car catching up on email and messages before you go in. Parked, stationary, heads-down, in the one place tied to your name. That's the easiest window to plan around.

The fix costs nothing. Screen down before you turn onto your street. Park, get out, get inside. Handle the phone once you're behind a locked door.

Credits to John McPhee for this video.

One habit won't protect you, but it shows the pattern: attacks happen in the gap between routine and awareness. Closing that gap is trainable.

Gart runs private advisory calls on exactly this:

Surveillance detection, residential security, emergency response protocols, safe traveling and arrival routines. One-on-one, 90 minutes, focused on how your own patterns look from the outside.

Details:
https://gart.io/training

"Not your keys, not your coins." Every holder knows it. ...

2026-06-26T15:15:32Z

"Not your keys, not your coins."
Every holder knows it. Almost everyone stops there.

You hardened the wallet, air-gapped the signer, split the multisig into three. All of it protects the coins.

None of it protects you.

Under a real threat, the coins follow the person. The last layer of self-custody isn't a device or a seed. It's you, and the people you'd protect.

Secure the keys. Then secure the one thing you can't restore from a backup.

Here's where to start:

The Personal Opsec Checklist, a practical self-assessment of the gaps most people miss.

It's a sample from our extended version, distributed exclusively at Gart Trainings.

Download for free:
https://gart.io/resources-checklist-subs

Good security works in layers. Avoidance, deterrence, detection, ...

2026-06-03T20:47:39Z

Good security works in layers. Avoidance, deterrence, detection, delay, response. Each layer an attacker has to get through costs them time and risk, and most look for someone easier first.

Session 2 of the Gart Training, Get Hard to Get, is on building those layers, plus the 30-day opsec plan to put them in place.

June 9 in Prague, 2 days before BTCPrague (npub167n…zu3r)
15 seats available.

https://gart.io/event/gart-training-btc-prague-2026-3/register

"Bitcoin and crypto owners may not be fully aware of the ...

2025-12-13T17:21:16Z

"Bitcoin and crypto owners may not be fully aware of the risks and are often unprepared – physically, mentally, or tactically...

...The best defense is to avoid being attacked in the first place."

New GLOK feature in DailyExpress - check it out! 👇

https://www.express.co.uk/news/uk/2141912/warning-issued-new-crime-emerging