AI Image
Trezor Wallets Also Compromised with Implants
ZERO DAY • • business
Key Points:
- Hardware hacker Joe Grand discovered implants in two Trezor wallets purchased from unauthorized third-party sellers, revealing compromised devices with malicious firmware generating pre-determined recovery seed phrases.
- Trezor announced it would reduce the number of authorized merchants selling its devices as a preventive measure, despite publicly denying any knowledge of compromised devices.
- Unlike Ledger implants, which passively record and transmit recovery seeds, Trezor implants replace the microcontroller and run modified firmware to display attacker-known seed phrases, bypassing software integrity checks.
- Trezor has acknowledged Grand's findings, expressing interest in analyzing the compromised devices and improving counterfeit detection, but requested advance notice before any public disclosures.
- The discovery of implants in Trezor devices sold by unauthorized sellers raises concerns about potential future compromises in devices sold by authorized resellers, prompting Trezor's recent reseller restrictions.
