trezor

Bitcoin hardware wallet manufacturer Trezor has warned that its third-party marketing platform Brevo, used for sending newsletters, experienced a data breach, with attackers using the platform to send phishing emails to 347,000 Trezor customers. The attackers sent emails using Trezor's domain, making the phishing attempt more deceptive, with malicious links encouraging users to download applications and enter wallet backups.Trezor stated that it shut down the domain at the DNS level within 20 minutes to prevent the links from remaining active, but approximately 2,500 people had already clicked on them. Trezor has suspended its Brevo account to stop further emails from being sent and emphasized that other Trezor systems were not affected aside from the marketing platform, while reminding users that Trezor never asks customers for wallet backups.Prior to this incident, Trezor disclosed last month that its third-party fulfillment partner ShipMonk was attacked, resulting in the data breach of 11,742 customers; last week it also reported that the names, emails, phone numbers, shipping addresses, and order numbers of another 67,000 U.S. customers were exposed in the breach. This year, cryptocurrency wallet Ledger's payment processor Global-e and wallet provider SafePal have also experienced data breaches, with approximately 39,800 customers' order information at SafePal being accessed without authorization.

Strive Vice President Joe Burnett posted on platform X that the email infrastructure of Trezor and BitBox is suspected to have been compromised, and the Bitcoin strengthening phase is still ongoing.

The Ethereum Foundation stated on the X platform that the Trezor hardware wallet now supports the "Clear Signing" feature through the ERC-7730 standard, making transactions more readable and understandable on the hardware device.This progress is the result of the Clear Signing working group promoted under the foundation's "Trillion Dollar Security Initiative," aimed at reducing the risk of users suffering asset losses due to "blind signing" of unclear transactions and encouraging more wallets and decentralized applications to participate.

Hardware wallet manufacturers Ledger and Trezor are calling on security researchers to adopt a more responsible approach to vulnerability disclosure. Ledger's Chief Technology Officer Charles Guillemet stated on the X platform that artificial intelligence has made vulnerabilities easier to discover and exploit, but some researchers disclose details before a fix is released, which he termed "exploiting others' risks for attention."Guillemet urged researchers to report vulnerabilities privately first and to agree on a timeline for fixes before disclosing details publicly, suggesting 90 days as a common default period, while also indicating that this could be adjusted flexibly based on the severity of the vulnerability and the amount of work required for the fix. Trezor's Security Chief Jan Komárek told Cointelegraph that 90 days is a commitment to vendors, not just an obligation for researchers. He suggested that researchers first contact vendors to agree on a timeline, and if the vendor fails to complete the fix within that period, they may choose to disclose publicly.The context of this statement is the recent close attention to hardware wallet security: the Coldcard theft incident involved over $100 million, and a data breach at Trezor's logistics provider also affected the personal information of tens of thousands of customers.

Hardware wallet manufacturer Trezor updated the progress of the data breach incident involving its logistics partner ShipMonk, stating that the previously disclosed scale of the breach was underestimated. Additionally, information of approximately 67,000 U.S. users who placed orders between November 2019 and August 2021 was fully exposed, including names, email addresses, phone numbers, shipping addresses, and order numbers.Trezor stated that it had previously confirmed multiple times with ShipMonk that the relevant data had been deleted according to the contract and data policy and had received written assurances, but the data was not actually deleted from the other party's system. Trezor claimed that its own system was not affected, and the hardware wallets remain secure, but affected users may face a higher risk of targeted phishing attacks. All affected users have been individually notified via email.This incident was first disclosed on August 13, affecting approximately 13,700 users. Trezor stated that it is accelerating the launch of an anonymous shipping service to reduce the risk of information exposure when users place orders.

Bitcoin News posted on the X platform stating that Trezor claims its customer data was exposed due to a security breach at the logistics provider ShipMonk. Customers who placed orders in the past 90 days in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers.Trezor stated that its systems were not compromised, and the devices remain secure, but it warns affected customers to be vigilant against carefully designed phishing attacks that exploit the leaked information.

Bitcoin News posted on the X platform that a Trezor user claimed their life savings were stolen after clicking on a Google sponsored search result impersonating Trezor. The phishing page was hosted on Google Sites and allegedly tricked victims into entering their wallet recovery seed.Trezor stated that it is upgrading its response to the report, working to remove the website, and reminding users to never enter their wallet backups or recovery phrases on any website or online form. Google sponsored phishing ads remain a persistent attack vector faced by cryptocurrency users.

According to Bitcoin.com, a Bitcoin and Litecoin holder provided a 12-word mnemonic phrase to an attacker impersonating Trezor support, resulting in approximately $282 million in assets being transferred, including about $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics company ZeroShadow stated that the incident stemmed from a social engineering attack and was not due to a breach of wallet software or private key infrastructure.The stolen funds were split via the THORChain cross-chain bridge within minutes and converted to Monero through an instant exchange service. The ZeroShadow monitoring team flagged and froze approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word mnemonic phrase contains about 128 bits of entropy, while a 24-word mnemonic phrase contains 256 bits of entropy. Chainalysis estimates that up to 23% of mined Bitcoin is permanently inaccessible due to lost keys, involving millions of BTC, with reasons including forgotten mnemonic phrases, damaged backups, and lack of inheritance plans.

According to The Block, Trezor's Chief Business Officer Danny Sanders refuted recent criticisms of cryptocurrency hardware wallets made by blockchain investigator ZachXBT.Earlier this week, ZachXBT posted on Telegram, "All hardware wallets are complete garbage and I do not recommend using them for important tasks such as signing transactions or storing funds," and suggested that users use a dedicated iPhone to store funds and sign transactions.In response, Sanders acknowledged in an interview that firmware/software updates for hardware wallets can sometimes interfere with urgent or large transactions, and that the user experience can indeed be "clunky," understanding the users' frustration. However, he opposed ZachXBT's blanket statement: while hardware wallets may not be the best single solution for advanced users managing large amounts of funds, they are not garbage.He pointed out that compared to hardware wallets, the operating system and connectivity features of an iPhone present more "attack risks." For the average cryptocurrency user, hardware wallets remain the best self-custody option available.

According to The Block, executives from hardware wallet manufacturer Trezor stated that the market's trend of fully pushing Bitcoin towards ETFization may pose a long-term risk to the core principles of the crypto industry. According to the company's Chief Business Officer Danny Sanders during the BTC Prague event, the current global crypto user base is approximately 600 million, but only about 10% of users choose to self-custody their assets, with only about 12 to 13 million users using hardware wallets.Since the launch of the U.S. spot Bitcoin ETF in 2024, which has attracted over $53 billion in inflows, institutional allocation of Bitcoin has significantly increased. However, Sanders pointed out that this trend may also weaken users' behavior of directly holding private keys. He believes that self-custody is one of the core attributes of the Bitcoin system, but there are still significant challenges in terms of user experience and security thresholds, leading more users to prefer participating in the market through custodial tools like exchanges or ETFs.Sanders emphasized that the industry should focus on improving the usability and security of self-custody, rather than simply accepting the path of "putting Bitcoin into ETFs." He stated that if the long-term evolution leads to an ETF-dominated holding structure, it would undermine the foundational logic of Bitcoin as a decentralized asset, which could be the "least ideal outcome" for the industry.

According to The Block, the Donjon security team under Ledger has bypassed the firmware verification mechanism of the TROPIC01 chip used in the Trezor Safe 7 through precise laser attacks in a laboratory environment, allowing unauthorized firmware to be loaded as long as the attacker possesses the physical device.Chip manufacturer Tropic Square further discovered that there are additional attack vectors in the MAC-and-Destroy security mechanism used for PIN verification on this chip, but details will not be disclosed until the enhanced version of the chip is launched at the end of 2026.Trezor stated that the PIN, mnemonic backup, and private keys have never been stored on a single chip, and they have notified partners, so ordinary users do not need to take action. Currently, the feasibility of attacks can be reduced by disabling the chip's MAINTENANCE mode.

According to Bleepingcomputer, Trezor and Ledger users have fallen victim to physical letter scams, where fraudsters impersonate official organizations to lure users into scanning QR codes that lead to phishing websites, and deceive them into providing their recovery phrases under the pretext of "identity verification checks" and "transaction checks," thereby facilitating the theft of cryptocurrency assets.

ChainCatcher news, according to official sources, hardware wallet manufacturer Trezor has issued a security warning indicating that attackers are abusing its contact form to send phishing emails disguised as official support replies, luring users into disclosing their wallet backup information.The official statement emphasizes that Trezor will never ask users for their wallet backups, and this information should always remain offline and private. This issue has been contained, but security is an ongoing process, urging users to remain vigilant.

ChainCatcher news, hardware wallet company Trezor announced that it has added Ethereum staking to its crypto management application Trezor Suite. This feature allows ETH holders to stake securely and continuously earn ETH rewards as long as they hold at least 0.1 ETH in their Trezor wallet.

ChainCatcher message, Trezor released a statement on platform X regarding the theft of its account: Despite having good protective measures, including strong passwords and 2FA, its X/Twitter account experienced a security incident overnight. The team will continue to investigate. Please stay vigilant and remember: Trezor will never ask for funds or assets to be sent to any address. Never share your recovery phrase.Previously, ZachXBT posted on platform X stating that the hardware wallet provider Trezor's X account was hacked, spreading false information about the SLERF presale, resulting in at least $8,100 in losses (including a 25% drainer fee). Upon review, the related posts have been deleted.

ChainCatcher message, on-chain detective ZachXBT posted on platform X that the X account of hardware wallet provider Trezor was hacked, releasing false information about the SLERF presale, resulting in at least $8,100 in losses (including a 25% drainer fee).Upon review, the related post has been deleted.

ChainCatcher message, on-chain detective ZachXBT posted on social media that the X account of hardware wallet manufacturer Trezor has been hacked, posting scam donation information. Users are advised to stay vigilant and protect their assets.

ChainCatcher news, hardware wallet Trezor has stated that it is investigating a security incident that occurred on January 17, 2024, where unauthorized access was gained to a third-party ticket portal it uses. Customers' digital assets were not harmed in any way by this incident. Internal audits indicate that only information from customers who interacted with Trezor Support since December 2021 may have been exposed, limited to email addresses and names/nicknames.Trezor stated that although this affects only a small portion of its entire user base, 66,000 users were impacted during this period, and emails have been sent to these users as a reminder. Trezor is working with third-party service providers to conduct a thorough investigation of the incident. Trezor reminds customers to remain vigilant against potential phishing attacks.

ChainCatcher news, Web3 hardware wallet manufacturer Trezor announced that the Trezor Model T and Trezor Safe 3 hardware wallets now support SOL and SPL tokens.

ChainCatcher news, hardware wallet developer Trezor posted on X that Trezor Model T and Trezor Safe 3 have added support for SOL and all SPL tokens.