Digital Asset
Intelligence
Security Incident · Wallet

Trezor Wallet Vulnerability

·Historical incident record

Incident Overview

An attacker with a stolen device can extract the seed from the device. It takes less than 5 minutes and the necessary materials cost around 100$. This vulnerability affects Trezor One, Trezor T, Keepkey and all other Trezor clones. Unfortunately, this vulnerability cannot be patched.

Sources & References

Original incident referencehttps://ledger-donjon.github.io/Unfixable-Key-Extraction-Attack-on-Trezor/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Trezor

    Attack methodRDP downgrade attack
    Reported lossNot disclosed
  2. Incident date
    Target

    Trezor

    Attack methodThird-party Vulnerability
    Reported lossNot disclosed
  3. Incident date
    Target

    Trezor

    Attack methodAccount Compromise
    Reported lossNot disclosed
  4. Incident date
    Attack methodMalicious Code Injection Attack
    Reported lossNot disclosed
  5. Incident date
    Target

    Bitmarket

    Attack methodInsufficient liquidity
    Reported loss2,300 BTC