Wallet custody, cryptographic trust boundaries, vulnerabilities, audits and practical defensive habits