Zurück zum Sicherheitsportal
Monero unlock_time issue
Gemeldet auf February 1, 2020
The Monero field unlock_time was not confirmed on the device's display. Since Monero network does not do any sanity checks for this field, this allows a perpetrator to lock user’s funds for a very long time by simply setting it to a very high value.
Behobene Sicherheitslücken
Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.
- Trezor T Bootloader firmware update retry could skip header checks29. September 2026
- E-shop referral discount could be applied to eGift card purchases16. September 2026
- Authenticity proofs not bounded to their secure element on TS716. August 2026
- Monero payment ID could be signed without being shown13. August 2026
- Missing bounds check in JPEG image decoding12. August 2026
- Cardano output datum and reference script not shown in simple transactions11. August 2026