Ledger security team discloses hardware vulnerability in the chip used by Trezor Safe 7, Trezor claims user funds are safe

According to ChainCatcher, as reported by The Block, the Donjon security team under Ledger successfully bypassed the firmware verification mechanism of the TROPIC01 chip used in the Trezor Safe 7 through a precise laser attack conducted in a laboratory environment. This allowed attackers holding the physical device to load unauthorized firmware. Chip manufacturer Tropic Square further discovered an additional attack path in the chip’s MAC-and-Destroy security mechanism for PIN verification, but details will not be disclosed until an enhanced version of the chip is released at the end of 2026.

Trezor stated that PINs, mnemonic backups, and private keys have never been stored on a single chip. Partners have been notified, and regular users do not need to take action. Currently, the feasibility of attacks can be reduced by disabling the chip’s MAINTENANCE mode.