Voltar para o portal de segurança
Donjon's Trezor Safe 3 evaluation
Reportado em November 12, 2024
Ledger Donjon evaluated our Trezor Safe Family and successfully reused a previously known attack to demonstrate how some countermeasures against supply chain attacks in Trezor Safe 3 can be bypassed. Trezor Safe 5 is not affected because it uses a more recent microcontroller designed to be more resilient to similar attacks.
Vulnerabilidades resolvidas
Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.
- Inability to cancel certain flows on pre-production firmware31 de outubro de 2025
- Missing confirmation in the ECDHSessionKey call26 de novembro de 2023
- XSS in Trezor Connect legacy versions7 de fevereiro de 2023
- Insufficient field size check in Protobuf12 de julho de 2021
- XSS in Trezor Connect3 de agosto de 2020
- Missing path isolation check14 de julho de 2020