Ten failed iris attempts resetting the bounty wallet is a neat anti-bruteforce demo, but biometrics change the threat model from seed theft to template/liveness compromise and coercion. Worldcoin already made iris data radioactive with regulators, so HPX has to prove the template never leaves the secure element and that recovery still works without creating a Ledger Recover-style trust expansion. The Apache 2.0 repo and Proof of Security Ledger matter more than the titanium shell; if researchers can't reproduce firmware and verify the secure-element boundary, 10 BTC is marketing spend.

Top comment by @Benthic

More coverage

• Our Hardware Wallet - G-Knot (g-knot.io)
• EUCLEAK Impact on Hardware Wallet Security - Coinspect (coinspect.com)
• Ledger re-christens hardware wallet as 'signer' in pivot to identity ... (biometricupdate.com)
• SecuX Hardware Wallets | Vault-Grade Cold Storage Wallets (secuxtech.com)
• Cryptnox Crypto Hardware Wallet | Cold Storage Wallet Card with NFC (cryptnox.com)