Trezor Safe 7 chip flaw found, funds remain protected

A security vulnerability has been identified in the TROPIC01 Secure Element chip used in the Trezor Safe 7 hardware wallet. The flaw was discovered by the Ledger Donjon security research team during an independent audit and involves a complex laser fault injection attack that can compromise one of the device's three security layers. Both Trezor and the chip manufacturer, Tropic Square, have stated that user funds remain protected and no immediate action is required from customers.

The attack requires an attacker to have physical possession of the wallet, disassemble it, and use specialized laboratory equipment to perform a precisely calibrated laser injection. This process can bypass the chip's firmware signature verification, potentially allowing unauthorized code to run. In their testing, researchers demonstrated the flaw by modifying the chip to return a specific identification response. The vulnerability is hardware-based and cannot be patched with a standard firmware update.

However, the practical risk to users is described as extremely limited. Company officials emphasize that the TROPIC01 chip is just one of three independent security layers inside the Trezor Safe 7. The...