Kembali ke portal keamanan
Malicious change in mixed transactions
Dilaporkan pada February 23, 2015
A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.
Fixed in 1.3.1.
Dilaporkan oleh Nicolas Bacca
Trezor Model One
Kerentanan yang teratasi
Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.
- Authenticity proofs not bounded to their secure element on TS716 Agustus 2026
- THP pairing could be completed without the pairing code22 Juni 2026
- Desktop update could install before signature verification completed16 Juni 2026
- Solana account-creation confirmation completeness14 Juni 2026
- Solana signing display improvement12 Juni 2026
- Coordination fee cap shown on CoinJoin authorization3 Juni 2026