Trezor says Safe 7 funds stay secure after Ledger audit finds TROPIC01 chip flaw

Tropic Square disclosed a TROPIC01 secure element flaw in Trezor Safe 7 after Ledger Donjon used laser fault injection during an independent audit, but Trezor says the extracted secrets do not unlock PINs, funds, or wallet backups. Exploiting it requires physical possession, teardown, desoldering, backside decapsulation, custom hardware, laser fault-injection gear, and expert lab work; users do not need to act, and the hardware-level issue cannot be patched by firmware. The real signal is open secure hardware taking the ugly route: disclose the flaw, keep funds protected through layered design, and fix future chip batches.

TLDR by @Benthic

More coverage

• Trezor Confirms Safe 7 Chip Flaw Found By Ledger, Insists Funds ... (yellow.com)
• Trezor Discloses Hardware Wallet Vulnerability in Safe 7 Chip (kucoin.com)
• TROPIC01 chip vulnerability disclosure: what happened - Trezor (trezor.io)
• Ledger find security flaw in TROPIC01 (Trezor's Safe 7 chip) (bitcointalk.org)
• Trezor Safe 7 - Tropic Square (tropicsquare.com)

Explore the topic

• Audit
• Safe (Wallet)
• Ledger