Do You double-Examine the address you’re interacting with with your HW ahead of signing the TX (not like the vast majority of CT)? Or do you only look at the very first and previous few (three–four) people with the address? Be sure to Be aware that vanitygen is a legacy https://vanity-address.com