Trezor | Crypto

A shipping-provider breach revealed customer identities and delivery locations, creating targeted phishing and physical-security risks. The post With violent crypto home invasions surging, a data breach exposing over 10,000 Trezor owners puts physical safety on the line appeared first on CryptoSlate.

The incident marks the first time Trezor customers' shipping addresses were exposed.

The wallet provider warned that thousands of users could potentially be at risk of phishing attempts, while advising that all devices, private keys and backups were safe. Cryptocurrency wallet company Trezor reported a breach of personal data affecting about 14,000 users through its shipping provider, ShipMonk.  Trezor’s Wednesday blog post said users who received its products from the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal between May 10 and Aug. 8 were at risk from potential phishing attacks using their personal information. The company reported that 11,742 customers could have had their name, physical address, phone number, and email address compromised, while 1,947 users potentially had their name, city, and email address breached. “To be clear, our systems were not compromised, and your Trezor device is secure, but the affected customers might be targeted by more sophisticated phishing attempts,” said the company. “Scammers can use the leaked information to send fake emails, make fake phon...

Trezor and Tropic Square disclosed a TROPIC01 chip vulnerability found during a Ledger Donjon audit, saying the Safe 7 wallet and user funds remain secure. Hardware wallet company Trezor and chipmaker Tropic Square have disclosed a vulnerability in one of the secure elements used in Trezor Safe 7 hardware wallet, saying the flaw does not put user funds at risk because the chip alone cannot expose a wallet. The vulnerability was identified during an independent security audit conducted by Ledger Donjon, the security research team at rival hardware wallet maker Ledger, according to a Trezor statement. Tropic Square provided the affected TROPIC01 Secure Element chip to the Ledger Donjon team for an independent audit. The companies said compromising TROPIC01 alone would not be enough to access a user’s wallet, PIN or funds. Read more

The feature lets users earn stablecoin yield directly through Trezor Suite without connecting external wallets or using separate DeFi apps. Trezor has integrated native stablecoin yield functionality into Trezor Suite, the hardware wallet provider’s desktop and mobile application, in a move that could make earning yield on stablecoins more accessible to users who have traditionally avoided decentralized finance due to its complexity and security risks. Announced on Thursday, the feature comes through an integration with Morpho, a decentralized lending protocol built on Ethereum. The integration allows users to deposit USDt (USDT) and USDC (USDC) into pre-selected Morpho vaults directly through Trezor Suite without connecting external wallets or using separate DeFi applications. According to Trezor, deposits, withdrawals and reward claims are signed directly on users’ hardware wallets through the company’s clear-signing interface, which displays transaction details in human-readable form on the device screen. ...

Cointelegraph takes a look at the latest devices from Ledger and Trezor, two long-time leaders in self-custody hardware wallets. Major hardware crypto wallet providers Ledger and Trezor have both released new wallet iterations, giving users additional options to safeguard their assets through self-custody. Paris-based Ledger introduced its latest device, the Ledger Nano Gen5, on Thursday. In a notable shift, the company has dropped the term “hardware wallet” entirely, now referring to all its devices as “Ledger signers.” Rival hardware wallet company Trezor, based in Prague, also released its Trezor Safe 7 earlier this week, describing the device as its first quantum-ready hardware wallet. Read more

Trezor warned of ongoing phishing attempts exploiting its support contact form. Hardware wallet producer Trezor warned users about an ongoing phishing campaign that mimics the company’s official customer support replies. In a Monday X post, Trezor warned that the firm is aware “attackers abused our contact form to send scam emails appearing as legitimate Trezor support replies.” The company reminded its customers not to share wallet backups, noting that they should always be kept “private and offline.” Trezor said it “will never ask for your wallet backup,” confirming that the emails may appear as legitimate but are not. Read more