Hardware wallet provider Trezor has patched up a security flaw in two of its latest models after competitor firm Ledger’s open-source research arm discovered a vulnerability in their microcontrollers. Ledger Donjon acknowledged Trezor has made several security advancements of late but found cryptographic operations could still be performed on the microcontroller of Trezor’s Safe 3 and 5 models, which could make them “vulnerable to more advanced attacks.”Fortunately, Trezor has since addressed the vulnerabilities found, Ledger’s chief technology officer Charles Guillemet said in a March 12 X post.“We believe that making the ecosystem more secure helps everyone, and is critical as we push towards broader adoption of crypto and digital assets,” Guillemet added.
The Secure Elements feature “effectively thwarts any inexpensive hardware attack, in particular voltage glitching,” Ledger said in a March 12 post.“[This] gives users confidence that their funds are safe even if their device gets misplaced or stolen.”However, Ledger found another potential attack vector stemmed from the microcontroller, the other main part of Trezor’s two-chip design for its Safe 3 and 5 models.
Related: ‘Dark Skippy’ method can steal Bitcoin hardware wallet keysHowever, when asked whether Trezor was able to patch this issue via firmware, the hardware wallet provider responded: “Unfortunately not.”“In cybersecurity, the golden rule is simple: nothing is fully unbreakable.
or
Share This Story
Article Details
Author / Journalist: Cointelegraph by Brayden Lindrea
The story "Hardware wallet Ledger helps competitor Trezor resolve security vulnerability" has 450 words across 18 sentences, which will take approximately 2 - 4 minutes for the average person to read.
Which news outlet covered this story?
The story "Hardware wallet Ledger helps competitor Trezor resolve security vulnerability" was covered 13 hours ago by Coin Telegraph, a news publisher based in United States.
How trustworthy is 'Coin Telegraph' news outlet?
Coin Telegraph is a fully independent (privately-owned) news outlet established in 2013 that covers mostly crypto news.
The outlet is headquartered in United States and publishes an average of 994 news stories per day.
It's most recent story was published 8 hours ago.
What do people currently think of this news story?
The sentiment for this story is currently Negative, indicating that people regard this as "bad news".
How do I report this news for inaccuracy?
You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.
