1 hour ago
The flaw affects lone 1 of the wallet's aggregate information layers and would necessitate carnal access, specialized instrumentality and precocious expertise to exploit.
Jun 3, 2026, 10:04 a.m. 1 min read
Hardware wallet shaper Trezor disclosed a information flaw successful a spot utilized successful its caller Safe 7 instrumentality but said customers' crypto remains unafraid and nary enactment is needed.
The contented affects “TROPIC01,” a information spot developed by Trezor sister institution Tropic Square. The flaw was uncovered during an autarkic audit by Ledger's information probe team, Donjon, which utilized specialized laboratory instrumentality to bypass immoderate of the chip's protections, according to an emailed announcement Wednesday.
Tropic Square aboriginal identified a related weakness that could exposure further accusation stored connected the chip. However, Trezor said the vulnerability does not springiness attackers entree to users' crypto holdings, backstage keys oregon wallet backups due to the fact that the Safe 7 relies connected aggregate layers of information alternatively than a azygous chip.
An attacker would request carnal possession of a device, costly laboratory instrumentality and precocious method expertise to effort the attack. There is nary grounds the flaw has been exploited successful the existent world, Trezor said.
The disclosure stems from a collaboration betwixt 2 of the hardware wallet industry's biggest rivals. Trezor said Ledger's findings helped place the vulnerability and argued that openly disclosing information issues makes the broader crypto ecosystem safer.
“I judge the unfastened process by which this vulnerability was found, examined, and disclosed is the exemplary the manufacture should clasp itself to,” Matej Žák, CEO of Trezor, said successful the announcement.
Read more: Trezor Unveils New Hardware Wallets, Corrosion-Resistant 'Keep Metal' for Recovery
English (US) 