Ledger 安全团队披露 Trezor Safe 7 所用芯片硬件漏洞,Trezor 称用户资金安全

链捕手
Jun 03

ChainCatcher 消息,据 The Block 报道,Ledger 旗下 Donjon 安全团队在实验室环境下,通过精密激光攻击绕过 Trezor Safe 7 所用 TROPIC01 芯片的固件验证机制,可在攻击者持有设备实物的前提下加载未授权固件。

芯片厂商 Tropic Square 进一步发现,该芯片用于 PIN 验证的 MAC-and-Destroy 安全机制存在额外攻击路径,但将在强化版芯片于 2026 年底推出前暂不公布细节。

Trezor 表示,PIN、助记词备份和私钥从未存放在单一芯片上,已通知合作方且普通用户无需操作,目前可通过关闭芯片 MAINTENANCE 模式降低攻击可行性。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10