Tropic Square disclosed a TROPIC01 secure element flaw in Trezor Safe 7 after Ledger Donjon used laser fault injection during an independent audit, but Trezor says the extracted secrets do not unlock PINs, funds, or wallet backups. Exploiting it requires physical possession, teardown, desoldering, backside decapsulation, custom hardware, laser fault-injection gear, and expert lab work; users do not need to act, and the hardware-level issue cannot be patched by firmware. The real signal is open secure hardware taking the ugly route: disclose the flaw, keep funds protected through layered design, and fix future chip batches.

TLDR by @Benthic

More on Trezor

Comments