All articles

Every guide we have published, newest first. Search by title or filter by topic.

20 articles
Square SSP Academy cover: address poisoning and lookalike crypto addresses

Address poisoning: the attack that only needs you to copy the wrong thing

No malware, no phishing site, no signature stolen. The attacker just puts a lookalike address in your transaction history and waits for you to copy it. Why 'always double-check the address' fails, and what actually defends against it.

7 min
Square SSP Academy cover: Telestai, Ravencoin, and what a fork inherits

The same bug, two outcomes: Telestai, Ravencoin, and what a fork inherits

Telestai carried Ravencoin's unvalidated nHeight field for its entire existence. It was never exploited — because someone read another chain's incident report and shipped a patch in two days. What forks inherit, and why upstream attention is most of your security.

7 min
Square SSP Academy cover: Ravencoin's consensus bug and the meaning of a confirmation

When a chain rewrites itself: Ravencoin's consensus bug and what a confirmation is really worth

A field in the block header that nobody validated made counterfeit blocks nearly free to mine, and three days of Ravencoin history had to be thrown away. What that says about confirmations — and the honest limits of what any wallet can protect you from.

7 min
SSP Academy square cover: the Coldcard entropy bug and two-device architecture

When the Randomness Fails: The Coldcard Entropy Bug and What Two Devices Change

A single 2021 commit made thousands of seeds guessable, and $116M left wallets that had done nothing wrong. Why weak entropy is silent, total loss — and the honest limits of what 2-of-2 protects against.

6 min
SSP Academy square cover: MPC wallets vs multisig

MPC Wallets vs Multisig

Threshold signatures split a key; multisig requires several. What the chain enforces, what each one costs, and which failures each model actually survives.

8 min
SSP Academy square cover: the Ravencoin coin guide for SSP Wallet

Ravencoin in SSP: Assets, Fees, and the Fork That Rewrote Three Days

Ravencoin's asset layer, why SSP handles the coin but not the tokens, and the August 2026 consensus exploit that erased three days of chain — including whether SSP users were affected.

6 min
SSP Academy square cover: the Zcash coin guide for SSP Wallet

Zcash in SSP: Transparent Only, and Why Upgrades Matter Here

SSP holds ZEC in the transparent pool, not the shielded one — custody, not confidentiality. Plus the consensus branch ID that makes staying updated non-optional.

6 min
SSP Academy square cover: the Bitcoin Cash coin guide for SSP Wallet

Bitcoin Cash in SSP: Addresses That Look Like Bitcoin's, and Why That Matters

The fork kept Bitcoin's address format, and people lost money to it. How CashAddr and SIGHASH_FORKID fix that, plus the lowest default fee in the wallet.

5 min
SSP Academy square cover: comparing self-custody options

Comparing Self-Custody Options

Seed phrase, hardware wallet, MPC, multisig — an honest comparison of what each model actually guarantees, what it costs you, and how to pick.

7 min
SSP Academy square cover: the Dogecoin coin guide for SSP Wallet

Dogecoin in SSP: One-Minute Blocks, a Big Dust Limit, and No Cap

A dust limit 1,800x Bitcoin's, fees that look huge and cost nothing, P2SH addresses instead of segwit — and an issuance schedule that never stops.

5 min
SSP Academy square cover: Solana fees and rent explained

Solana Fees and Rent, Explained

Base fees, priority fees and refundable rent, with the real numbers SSP charges — and why your first Solana send costs more than every one after it.

6 min
SSP Academy square cover: the Litecoin coin guide for SSP Wallet

Litecoin in SSP: The Chain Closest to Bitcoin, and Where It Isn't

Same P2WSH multisig, same dust limit, same seed — at a fifth of the fee rate and a quarter of the block time. Plus the one thing SSP does not do: MWEB.

6 min
SSP Academy square cover: SPL tokens and token accounts in SSP

SPL Tokens and Token Accounts in SSP

Why Solana gives every token its own account, who pays the rent for it, and how SSP puts the token's decimals inside the signature you approve.

8 min
SSP Academy square cover: the Flux coin guide for SSP Wallet

Flux in SSP: Sending, Holding, and the One-Hour Rule

Flux transactions expire after about an hour. What that means for two-device signing, why fees are trivial, and how node collateral stays in your own multisig.

7 min
SSP Academy square cover: transaction simulation in SSP Enterprise

Transaction Simulation: What a Transaction Will Do Before You Sign It

A preview of a transaction's effects, fourteen warning checks, address-poisoning detection — and why none of it is allowed to block your signature.

8 min
SSP Academy square cover: Sending Solana with SSP

Sending Solana with SSP

A step-by-step guide to sending SOL and SPL tokens from SSP: what the review screen verifies, why approval never expires, and what the first send costs.

7 min
SSP Academy square cover: critical actions and re-signing in SSP Enterprise

Critical Actions: Why Some Operations Ask for Both Devices Again

Thirteen operations need re-signing, not a session cookie. Why the server writes the challenge, what it is bound to, and why failed attempts are logged too.

6 min
SSP Academy square cover: Solana in SSP

Solana in SSP

How SSP holds SOL and SPL tokens in a 2-of-2 multisig with no creator, who pays the fees, and what your devices verify before signing.

7 min
SSP Academy square cover: what actually stops a transaction

What Actually Stops a Transaction

Whitelists, time locks and approval rules shape what gets proposed. Only the signature threshold is enforced by the chain. A three-layer threat model, stated honestly.

6 min
SSP Academy square cover: setting up your first enterprise vault

Setting Up Your First Enterprise Vault

The five-step wizard, why two of those steps are permanent, what pending setup means, and the four checks to run before any money arrives.

7 min