Trezor says your crypto is safe after Ledger audit exposes a hardware flaw
The flaw affects only one of the wallet’s multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit.
What to know:
- Trezor disclosed a security flaw in the TROPIC01 chip used in its Safe 7 hardware wallet after Ledger’s Donjon security team identified a successful laboratory attack, but the company says the vulnerability does not put user funds at risk.
- The flaw affects only one of the wallet’s multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit, with no evidence of real-world attacks or compromised devices.
Tropic Square later identified a related weakness that could expose additional information stored on the chip. However, Trezor said the vulnerability does not give attackers access to users’ crypto holdings, private keys or wallet backups because the Safe 7 relies on multiple layers of security rather than a single chip.
An attacker would need physical possession of a device, expensive lab equipment and advanced technical expertise to attempt the attack. There is no evidence the flaw has been exploited in the real world, Trezor said.
The disclosure stems from a collaboration between two of the hardware wallet industry’s biggest rivals. Trezor said Ledger’s findings helped identify the vulnerability and argued that openly disclosing security issues makes the broader crypto ecosystem safer.
