Trezor Drops Resellers After Ledger Implant Attack Scare
Trezor is trading retail reach for tighter control of device sourcing and handling as alleged implants put authorized reseller channels under scrutiny.
Every Zipp story tagged #Trezor, newest first.
Trezor is trading retail reach for tighter control of device sourcing and handling as alleged implants put authorized reseller channels under scrutiny.
Evin McMullen of Billions argues the real security crisis is not the $320 million exploit but the identity honeypots every exchange, on-ramp and wallet maker keeps filling, soon to be multiplied by…
No Bitcoin keys or funds were exposed, but names and delivery addresses can make recovery-word phishing look credible long after a wallet purchase.
Wallets remain safe, but a third-party newsletter breach exposed email lists across multiple Bitcoin firms. The danger is in following the email's recovery-seed instructions.
Trezor's second third-party breach in two months, and this time attackers sent phishing from the vendor's own domain, not a look-alike address.
Hardware-wallet security extends beyond the device itself: a vendor breach can make phishing alerts look credible and turn user trust into the attack surface.
Attackers reaching users through Trezor's own legitimate email channel is the real escalation: even offline seed storage doesn't shield users from phishing through the vendor's front door.
The incident highlights the privacy risk of third-party fulfillment, while Trezor says its own systems and users' devices remain secure.
Hardware-wallet owners face phishing and physical-targeting risk as roughly 67,000 more records resurface from a vendor Trezor believed had purged them. The 90-day deletion policy did not hold.
The expanded exposure raises phishing and physical-security risks for hardware-wallet users, while Trezor says its own systems and hardware wallets remain secure.
The broader concern is third-party data handling, raising compliance and reputational pressure for crypto businesses beyond Trezor itself.
The breach is digital, but the downstream risk is physical: name-and-address leaks now translate directly into wrench-attack targeting for known crypto holders.
The breach puts customer privacy and third-party data handling in focus, while Trezor says its systems and devices remain secure.
Wallets and firmware stay intact, but the leaked phone numbers and home addresses give phishing crews exactly what they need to mail counterfeit devices and run home-targeted extortion.
The Trezor executive agreed firmware updates can disrupt urgent transactions, but framed the critique as overbroad for the entire self-custody category.
Trezor Chief Commercial Officer Danny Sanders warned that nudging investors to park Bitcoin in spot ETFs instead of…
Ledger's security research team has disclosed a vulnerability in the chip used by Trezor's Safe 7 hardware wallet…
The vulnerability lives on a single chip inside Trezor's new Safe 7, but the device's multi-layer architecture means attackers would still need physical access, lab equipment and deep expertise —…