Kentucky Senate Urged to Strip Hardware Wallet Provision From Crypto Bill

A last-minute amendment requiring hardware wallet providers to assistance reset idiosyncratic credentials, tucked into Kentucky’s sweeping crypto ATM bill, is facing mounting backlash, with experts saying it is simply a cardinal misunderstanding of however crypto infrastructure works.

Section 33 of House Bill 380, added arsenic a last-minute level amendment during House debate, would necessitate hardware wallet providers to furnish customers with a mechanics to reset "any password, pin, effect phrase, oregon different akin information" needed to entree a wallet. 

“BPI is sending a missive to the Kentucky Senate informing them of the harmfulness of this language,” the radical wrote connected X.

Hardware wallets are carnal devices that store crypto backstage keys offline and guarantee lone the user, not adjacent the manufacturer, tin entree oregon retrieve them.

"This is apt acold much indicative of a misunderstanding than a deliberate effort astatine control," Joe Ciccolo, Founder and President of BitAML, told Decrypt. 

“Policymakers often conflict with the conception of self-custody,” Ciccolo said, noting that “there is nary cardinal authorization susceptible of resetting entree credentials,” dissimilar accepted systems wherever betterment is standard.

BPI described the mandate arsenic "technologically intolerable for non-custodial wallets," noting that requiring a backdoor undermines Bitcoin's cardinal information exemplary and pushes users toward centralized custodians that are much susceptible to hacks and failures.

“Kentucky is abruptly astir to prohibition self-custody. Tell your friends,” Conner Brown, Managing Director astatine BPI, wrote connected X.

"Requiring hardware wallet providers to retrieve oregon reset credentials would efficaciously unit them to redesign their products successful a mode that undermines self-custody—or exit the marketplace altogether," Ciccolo said. 

“Most non-custodial wallet providers would apt take not to run successful Kentucky alternatively than compromise their halfway information model,” helium added, informing of “reduced user choice” and “diminished privateness protections.”

"The precise consumers the measure aims to support would suffer entree to 1 of the safest ways to store integer assets," helium said.

On safer paths forward, Ciccolo noted “social betterment mechanisms oregon multi-signature setups” tin trim hazard “without introducing centralized control,” adding that “the champion extortion is ensuring users recognize some the benefits and responsibilities of self-custody.” 

He besides backed BPI’s move, saying “education is critical,” and that erstwhile proposals stem from a “knowledge gap,” nonstop engagement with policymakers is “the astir effectual way forward,” noting it “directly impacts consumers who worth fiscal autonomy and security.”

HB 380 was introduced successful the House connected January 14, reported favorably retired of the Banking and Insurance Committee connected March 4, and passed the afloat enclosure 85-0 connected March 13. 

The underlying measure regulates virtual currency kiosk operators, establishes licensing requirements, and sets transaction limits, disclosures, and refund rules, provisions that transportation wide governmental enactment and are expected to determination the measure rapidly done the precocious chamber.

The measure arrived successful the Senate connected Monday and was referred to the Committee connected Committees. 

Kentucky’s determination follows a broader crackdown connected crypto kiosks, with Connecticut halting Bitcoin Depot for compliance failures and Minnesota considering a prohibition connected crypto ATMs.