返回安全门户
Donjon's Trezor Safe 3 evaluation
报告时间:November 12, 2024
Ledger Donjon evaluated our Trezor Safe Family and successfully reused a previously known attack to demonstrate how some countermeasures against supply chain attacks in Trezor Safe 3 can be bypassed. Trezor Safe 5 is not affected because it uses a more recent microcontroller designed to be more resilient to similar attacks.
已修复的漏洞
由社区报告,经调查后已解决。因为您的安全永远不可妥协。
- Solana signing display improvement2026年6月12日
- Unauthenticated Remote DoS via xpub Change-Index Amplification2026年5月19日
- Unauthenticated Remote Memory Exhaustion via Unbounded Timestamp Array2026年5月19日
- Ethereum's SLIP-24 payment-request branch in production firmware signs attacker calldata under cover of verified-swap UI2026年5月16日
- Cross-Origin Popup Takeover in Trezor Connect popup2026年5月3日
- Lock bypass in SD-protect-only configuration allows signing after LockDevice/autolock2026年4月14日