返回安全门户

Malicious change in mixed transactions

报告时间：October 1, 2019

A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.

Fixed in firmware 2.1.8.

报告人 Marko Bencun

我们的博客文章

Trezor Model T

已修复的漏洞

由社区报告，经调查后已解决。因为您的安全永远不可妥协。