Hey PH! 👋 I built WalletSOP after watching the recent Coldcard RNG incident drain over $100M from people who, in their own words, "did everything right." The failure wasn't user error — it was a manufacturer's implementation bug in how seed randomness was generated. That got me thinking: most self-custody security advice is scattered across forums and videos, and there's rarely a structured moment to actually audit your own setup against it. WalletSOP asks about your procedure — how your seed's randomness was generated, whether you use a passphrase, whether firmware is current — never your actual seed phrase. It scores four independent categories (Entropy, Backup & Storage, Access Control, Operational Hygiene) and gives you a tailored checklist for anything weak. It's 100% stateless: zero network requests, no backend, nothing stored. You can literally disconnect your wifi and it works identically — the source is public if you want to verify that yourself. Would love feedback, especially from anyone who's been through a cold-storage security incident themselves.

WalletSOP

A stateless security audit for your Bitcoin cold storage

A stateless security audit for your Bitcoin cold storage