Back to security portal
Solana token transfer displays the address lookup table account instead of the token mint
Reported on August 4, 2026
In some Solana token transfers, the device could show an incorrect token address on the confirmation screen. Fixed in firmware 2.12.5.
Reward 2900 USD
Resolved vulnerabilities
Reported by community. Investigated. Resolved. Because your security is never optional.
- Authenticity proofs not bounded to their secure element on TS7August 16, 2026
- Missing bounds check in JPEG image decodingAugust 12, 2026
- Stellar signer weight not shown when adding a signerAugust 8, 2026
- E-shop eGift card amount could be set outside the allowed valuesAugust 7, 2026
- Solana stake lockup settings not shown when stakingAugust 4, 2026
- Ethereum 1inch swap minimum output not shown on the deviceAugust 1, 2026