Self-custody fails open when the same online machine that builds and broadcasts a spend also holds the keys.
BIP 174 PSBT is the separation protocol: watch-only builds online, signs offline, sealed packet in between. New CryptoDecentral note on roles, air gaps, and what PSBT does not fix alone.
https://cryptodecentral.co.za/notes/self-custody-psbt-airgapped-signing
Protocol literacy only — not a hardware-wallet shopping list.
cryptodecentral / CryptoDecentral
npub10e…z384g
2026-09-18 07:54:41 UTC
Author Public Key
npub10eg6hnelz5yy65dmlmfa85j56gltc8jayayjzeqagvxml84027aq0z384gSeen on
wss://relay.nostr.netPublished at
2026-09-18 07:54:41 UTCEvent JSON
{
"id": "f008f09520543c96ee4bfd80c31d7be061432d9492a46d774c2b8700dcec7d4c",
"pubkey": "7e51abcf3f15084d51bbfed3d3d254d23ebc1e5d274921641d430dbf9eaf57ba",
"created_at": 1789718081,
"kind": 1,
"tags": [
[
"r",
"wss://relay.snort.social/"
],
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://nostr.land/"
],
[
"r",
"wss://purplepag.es/"
],
[
"r",
"wss://relay.nostr.net/"
],
[
"client",
"Primal Web"
]
],
"content": "Self-custody fails open when the same online machine that builds and broadcasts a spend also holds the keys.\n\nBIP 174 PSBT is the separation protocol: watch-only builds online, signs offline, sealed packet in between. New CryptoDecentral note on roles, air gaps, and what PSBT does not fix alone.\n\nhttps://cryptodecentral.co.za/notes/self-custody-psbt-airgapped-signing\n\nProtocol literacy only — not a hardware-wallet shopping list.",
"sig": "d005937e4fbd8f1cb342a5c688f1f716b04c181055bd3eb192f3e09078263ab23baab30e45309466a4ca4e1da76d4ecfe9a4f267f409718b58155eaeb073b0f8"
}