Trezor says your crypto is safe after Ledger audit exposes a hardware flaw

Trezor says users’ crypto is safe after Ledger researchers uncover chip flaw

Tech

Share this article

The flaw affects only one of the wallet’s multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit.

By Margaux Nijkerk|Edited by Jamie Crawley

Jun 3, 2026, 10:04 a.m. 1 min read

trezor_raspberry_thumb
  • Trezor disclosed a security flaw in the TROPIC01 chip used in its Safe 7 hardware wallet after Ledger’s Donjon security team identified a successful laboratory attack, but the company says the vulnerability does not put user funds at risk.
  • The flaw affects only one of the wallet’s multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit, with no evidence of real-world attacks or compromised devices.

Hardware wallet maker Trezor disclosed a security flaw in a chip used in its new Safe 7 device but said customers’ crypto remains secure and no action is needed.

The issue affects “TROPIC01,” a security chip developed by Trezor sister company Tropic Square. The flaw was uncovered during an independent audit by Ledger’s security research team, Donjon, which used specialized laboratory equipment to bypass some of the chip’s protections, according to an emailed announcement Wednesday.

Tropic Square later identified a related weakness that could expose additional information stored on the chip. However, Trezor said the vulnerability does not give attackers access to users’ crypto holdings, private keys or wallet backups because the Safe 7 relies on multiple layers of security rather than a single chip.

An attacker would need physical possession of a device, expensive lab equipment and advanced technical expertise to attempt the attack. There is no evidence the flaw has been exploited in the real world, Trezor said.

The disclosure stems from a collaboration between two of the hardware wallet industry’s biggest rivals. Trezor said Ledger’s findings helped identify the vulnerability and argued that openly disclosing security issues makes the broader crypto ecosystem safer.

“I believe the open process by which this vulnerability was found, examined, and disclosed is the model the industry should hold itself to,” Matej Žák, CEO of Trezor, said in the announcement.

Read more: Trezor Unveils New Hardware Wallets, Corrosion-Resistant ‘Keep Metal’ for Recovery

More For You

By Olivier Acuna|Edited by Aoyon Ashraf

10 hours ago

Bittensor co-founder Ala Shaabana (Olivier Acuna/CoinDesk)

Ala Shaabana explains how using Bitcoin network’s coordinate-and-reward playbook can bust open corporate monopolies on AI.

What to know:

  • At a Paris summit, Bittensor co-founder Ala Shaabana argued that decentralized networks are overtaking traditional corporate data centers as the backbone of global computing power.
  • Shaabana said Bitcoin’s network hash rate exceeds the combined power of the top 100 supercomputers by more than 600,000 times, illustrating the scale of distributed…


 

Leave a Reply

Your email address will not be published. Required fields are marked *