Zurück zum Sicherheitsportal
Malicious change in mixed transactions
Gemeldet auf October 1, 2019
A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.
Fixed in firmware 2.1.8.
Behobene Sicherheitslücken
Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.
- Authenticity proofs not bounded to their secure element on TS716. August 2026
- THP pairing could be completed without the pairing code22. Juni 2026
- Desktop update could install before signature verification completed16. Juni 2026
- Solana account-creation confirmation completeness14. Juni 2026
- Solana signing display improvement12. Juni 2026
- Coordination fee cap shown on CoinJoin authorization3. Juni 2026