Regresar al centro de seguridad

Malicious change in mixed transactions

Reportada en October 1, 2019

A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.

Fixed in firmware 2.1.8.

Reportada por Marko Bencun
Trezor Model T