Trezor Highlights Vulnerability in Hardware Wallet
Trezor has acknowledged a security flaw in its Safe 7 hardware wallet, identified during an independent audit by Ledger Donjon. This issue involves the TROPIC01 Secure Element chip, which could potentially expose one of the three essential "secrets" protecting user PINs, reducing the security framework from three layers to two. The company has reassured users that their funds remain secure and have not been compromised.
Details of the Vulnerability
The vulnerability was revealed through a successful laser fault injection attack, which necessitates that an attacker physically access the wallet, disassemble it, and employ specialized equipment. Despite the potential for exploitation, Trezor emphasized that access to the PIN—the final layer of security—remains intact, as only the TROPIC01 chip was targeted.
Trezor reiterated its commitment to security: "Compromising just the TROPIC01 chip does not grant access to the PIN, which serves as the ultimate layer of protection for your assets."
Cybersecurity firm Cyvers echoed Trezor's assurances, stating that user funds are secure and asserting that such an attack is "highly impractical." Unlike software-based hot wallets, Trezor's hardware wallet keeps private keys offline, which adds an additional layer of security.
