Are there any security vulnerabilities reported on Trezor's GitHub?

3 answers

• Andre GreenOct 15, 2020 · 5 years ago
  Yes, there have been a few security vulnerabilities reported on Trezor's GitHub. One notable incident was the 'RNG Vulnerability' discovered in 2019, which could potentially allow an attacker to guess the private keys. However, Trezor promptly addressed this issue and released a firmware update to fix it. It's important to note that no known cases of this vulnerability being exploited have been reported. Overall, Trezor has a good track record of promptly addressing and fixing security vulnerabilities.
  507

  254
• Flavius PrejbanAug 08, 2024 · 2 years ago
  Trezor's GitHub has had a few security vulnerabilities reported in the past. One example is the 'Supply Chain Attack' incident in 2020, where a malicious actor tampered with the firmware of a small batch of devices during the manufacturing process. Trezor promptly identified and addressed this issue, and they implemented additional security measures to prevent similar incidents in the future. It's worth mentioning that this incident affected only a small number of devices, and Trezor took immediate action to mitigate any potential risks.
  543

  181
• ASKDec 09, 2023 · 2 years ago
  As a third-party, BYDFi has analyzed the security vulnerabilities reported on Trezor's GitHub. While there have been a few incidents in the past, Trezor has demonstrated a strong commitment to security and has taken prompt action to address any vulnerabilities. It's important for users to regularly update their Trezor firmware to ensure they have the latest security patches. Additionally, users should follow best practices such as enabling passphrase protection and using strong, unique passwords to further enhance the security of their Trezor device.
  556

  139