Ledger finds security flaw in chip used by Trezor Safe 7

Ledger's security research team has disclosed a vulnerability in the chip used by Trezor's Safe 7 hardware wallet. Trezor has responded publicly, stating that user funds remain safe despite the finding.

Why it matters

When one major hardware wallet manufacturer's researchers find a flaw in a competitor's device, it carries unusual weight — Ledger and Trezor are the two dominant names in self-custody hardware, and their engineers understand the attack surface at a deep level. A chip-level vulnerability is particularly significant because it sits below the firmware layer, meaning software patches alone may not fully remediate the risk. The disclosure also raises questions about the supply chain and silicon sourcing decisions that hardware wallet makers rely on.

Market impact

The immediate reassurance from Trezor — that funds are not at risk — will limit panic selling of the device or broader self-custody sentiment damage in the short term. However, chip-level disclosures historically prompt follow-up scrutiny from independent security researchers, and the full scope of the vulnerability may not be known until a detailed technical write-up is published. Users holding assets on a Trezor Safe 7 should monitor official communications from Trezor closely for firmware updates or mitigation guidance.