Ledger Flags Trezor’s Security Weakness—Fixes Already in Place

Ledger’s security team, Donjon, acknowledged that Trezor had made progress in strengthening its devices. However, they found that cryptographic operations could still be carried out on the microcontroller, which left room for possible exploitation.

In a post on X, Ledger’s chief technology officer, Charles Guillemet, confirmed that Trezor had resolved the concerns. He stated, "We appreciate Trezor’s responsiveness to this responsible security disclosure and that Trezor addressed the vulnerabilities we found".

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

What is a MetaMask Wallet? (And How to Use it - Animated)

SUBSCRIBE

ON YOUTUBE

Trezor had already introduced Secure Elements—specialized chips designed to safeguard PIN codes and cryptographic information. These chips prevent unauthorized modifications to the wallet’s software, which reduces the risk of funds being stolen.

According to Ledger, this security feature effectively blocks common hardware-based attacks, such as those using voltage manipulation. The firm stated that Secure Elements gives users confidence that their funds remain protected even if their device is lost or stolen.

Despite these protections, Ledger found another potential weakness in Trezor’s two-chip system. While Trezor had implemented a firmware integrity check to detect unauthorized changes, Ledger demonstrated that an attacker could still bypass this measure.

However, when asked whether the issue could be fully fixed through a firmware update, the company stated that it could not.

On February 27, MetaMask announced plans to support both Bitcoin BTC $84,018.26 and Solana SOL $127.15 while working toward removing gas fees. How does the company plan to achieve this? Read the full story.