Back to security portal
Possible large transaction fee via two Segwit transactions
Reported on March 3, 2020
Due to a design flaw in BIP-143 an attacker could create two Segwit transactions which, when combined together, can send the coins from wallet via a massive transaction fee.
Fixed in firmware 1.9.1 for Model One and 2.3.1 for Model T.
Resolved vulnerabilities
Reported by community. Investigated. Resolved. Because your security is never optional.
- Authenticity proofs not bounded to their secure element on TS7August 16, 2026
- THP pairing could be completed without the pairing codeJune 22, 2026
- Desktop update could install before signature verification completedJune 16, 2026
- Solana account-creation confirmation completenessJune 14, 2026
- Solana signing display improvementJune 12, 2026
- Coordination fee cap shown on CoinJoin authorizationJune 3, 2026