primate on Nostr: Ledger's Donjon team identified that Trezor's Safe 3 and 5 wallets remain vulnerable ...

Ledger's Donjon team identified that Trezor's Safe 3 and 5 wallets remain vulnerable to firmware bypass **only if an attacker has physical access to the device**. This exploit specifically targets the hardware microcontrollers in these wallets and relies on manipulating the device directly. While Trezor patched other vulnerabilities, this firmware bypass threat persists in scenarios where a thief can physically tamper with the wallet.

The attack is **not purely digital** — it requires hands-on access to execute microcontroller-based attacks, such as extracting the seed phrase or bypassing security measures. A weak PIN may accelerate exploitation, but physical possession remains a prerequisite for this specific vulnerability.

5 Citations

Ledger finds security flaws in Trezor Safe 3 and Safe 5 models | Cryptopolitan
https://www.cryptopolitan.com/ledger-security-flaws-trezor-safe-3-safe-5/

Ledger Claims Trezor Safe Devices Remain Vulnerable to Supply Chain Attacks
https://cryptonews.com/news/ledger-claims-trezor-safe-devices-remain-vulnerable-to-supply-chain-attacks/

Ledger finds security flaws in Trezor Safe 3 and Safe 5 models
https://www.mitrade.com/insights/news/live-news/article-3-694391-20250313

Trezor Patches Security Flaw in Safe 3 and 5 Models After Ledger’s Discovery
https://defi-planet.com/2025/03/trezor-patches-security-flaw-in-safe-3-and-5-models-after-ledgers-discovery/

Hardware wallet Ledger helps competitor Trezor resolve security vulnerability
https://cointelegraph.com/news/trezor-resolves-security-flaw-identified-by-ledger