Back to security portal
Ethereum 1inch swap minimum output not shown on the device
Reported on August 1, 2026
For some 1inch swaps, the device didn’t show the minimum amount the user would receive, so a malicious host could weaken the user’s slippage protection. Fixed in firmware 2.12.5.
Reported by skygge
Reward 200 USD
Resolved vulnerabilities
Reported by community. Investigated. Resolved. Because your security is never optional.
- Authenticity proofs not bounded to their secure element on TS7August 16, 2026
- Missing bounds check in JPEG image decodingAugust 12, 2026
- Stellar signer weight not shown when adding a signerAugust 8, 2026
- E-shop eGift card amount could be set outside the allowed valuesAugust 7, 2026
- Solana token transfer displays the address lookup table account instead of the token mintAugust 4, 2026
- Solana stake lockup settings not shown when stakingAugust 4, 2026