Regresar al centro de seguridad
Malicious change in mixed transactions
Reportada en October 1, 2019
A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.
Fixed in firmware 2.1.8.
Vulnerabilidades solucionadas
Reportada por la comunidad. Investigada. Solucionada. Porque tu seguridad no es una opción.
- Trezor T Bootloader firmware update retry could skip header checks29 de septiembre de 2026
- E-shop referral discount could be applied to eGift card purchases16 de septiembre de 2026
- Authenticity proofs not bounded to their secure element on TS716 de agosto de 2026
- Monero payment ID could be signed without being shown13 de agosto de 2026
- Missing bounds check in JPEG image decoding12 de agosto de 2026
- Cardano output datum and reference script not shown in simple transactions11 de agosto de 2026