Voltar para o portal de segurança
Donjon's Trezor Safe 3 evaluation
Reportado em November 12, 2024
Ledger Donjon evaluated our Trezor Safe Family and successfully reused a previously known attack to demonstrate how some countermeasures against supply chain attacks in Trezor Safe 3 can be bypassed. Trezor Safe 5 is not affected because it uses a more recent microcontroller designed to be more resilient to similar attacks.
Vulnerabilidades resolvidas
Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.
- Unauthenticated Remote DoS via xpub Change-Index Amplification19 de maio de 2026
- Unauthenticated Remote Memory Exhaustion via Unbounded Timestamp Array19 de maio de 2026
- Ethereum's SLIP-24 payment-request branch in production firmware signs attacker calldata under cover of verified-swap UI16 de maio de 2026
- Cross-Origin Popup Takeover in Trezor Connect popup3 de maio de 2026
- Solana ALT recipient confirmation mismatch6 de abril de 2026
- Solana account type misclassification6 de abril de 2026