Back to security portal
Solana signing display improvement
Reported on June 12, 2026
Certain Solana account-creation instructions did not surface all signed fields on the device's confirmation screen, weakening the What-You-See-Is-What-You-Sign guarantee for those flows. The affected screens now display the complete set of relevant fields prior to confirmation.
Resolved vulnerabilities
Reported by community. Investigated. Resolved. Because your security is never optional.
- THP pairing could be completed without the pairing codeJune 22, 2026
- Desktop update could install before signature verification completedJune 16, 2026
- Solana account-creation confirmation completenessJune 14, 2026
- Coordination fee cap shown on CoinJoin authorizationJune 3, 2026
- Solana token-transfer recipient spoofing via Address Lookup Table referenceJune 1, 2026
- Open Redirect on trezor.io via /admin Cloudflare RewriteMay 29, 2026