Zurück zum Sicherheitsportal
Malicious change in mixed transactions
Gemeldet auf February 23, 2015
A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.
Fixed in 1.3.1.
Gemeldet durch Nicolas Bacca
Trezor Model One
Behobene Sicherheitslücken
Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.
- Authenticity proofs not bounded to their secure element on TS716. August 2026
- THP pairing could be completed without the pairing code22. Juni 2026
- Desktop update could install before signature verification completed16. Juni 2026
- Solana account-creation confirmation completeness14. Juni 2026
- Solana signing display improvement12. Juni 2026
- Coordination fee cap shown on CoinJoin authorization3. Juni 2026