Trezor's Crypto Safe Despite Ledger Audit—Hardware Flaw Disclosed
By John Nada·Jun 3, 2026·3 min read
Trezor's Safe 7 device has a security flaw, but users' crypto remains safe. Ledger's audit helped uncover the issue, promoting industry transparency.
In a recent announcement, Trezor, a leading hardware wallet manufacturer, reassured its users that their crypto holdings remain secure despite a newly disclosed security flaw in its Safe 7 device. This revelation came after an independent security audit conducted by the security research team of Ledger, a company typically seen as a rival in the hardware wallet industry. The audit was performed by Ledger's team, Donjon, and uncovered a vulnerability in the 'TROPIC01' chip, developed by Trezor's sister company, Tropic Square.
Matej Žák, CEO of Trezor, praised the open process by which the vulnerability was discovered, examined, and disclosed, suggesting it as a model for the entire industry to follow. This approach, he argued, enhances the safety of the broader crypto ecosystem. The flaw, while significant, affects only one of the device's multiple security layers and requires physical access to the device, as well as specialized equipment and advanced technical expertise to exploit.
Trezor's Safe 7 device, despite this flaw, is designed to prevent unauthorized access to users' crypto assets, private keys, and wallet backups. The device relies on a multi-layered security approach, meaning that a single chip vulnerability does not compromise the entire device's security. This layered security is a critical feature of Trezor's design philosophy, ensuring that users' assets are protected even if one component is compromised.
Turning $1.6M in 401(k) into $310K Roth — Tax Strategy Unveiled
Retirees convert 401(k) to Roth IRA, avoiding high taxes, and boosting Social Security.
Tropic Square, the developer of the TROPIC01 chip, later identified a related weakness that could expose additional information stored on the chip. However, they assured customers that this does not provide attackers with access to crypto holdings or sensitive data. This further highlights the robustness of the Safe 7’s security design, which does not rely solely on a single chip for its defensive measures.
Trezor's commitment to security and transparency is further evidenced by its handling of this situation. By openly disclosing the flaw and collaborating with a rival company to identify and address the issue, Trezor demonstrates a dedication to the safety and security of its users. This approach not only benefits Trezor's customers but also sets a precedent for the entire industry, encouraging other companies to adopt similar practices.
The Safe 7 device itself is a testament to Trezor's innovative approach to crypto security. Equipped with the TROPIC01 chip, the device has been designed with multiple security layers to protect users' assets from a wide range of potential threats. This multi-layered approach ensures that even if one security layer is compromised, others remain intact to safeguard users' crypto holdings.
The collaboration between Trezor and Ledger highlights the potential for industry rivals to work together for the common good. By sharing information and resources, these companies can address security challenges more effectively and improve the overall safety of the crypto ecosystem. This spirit of cooperation is vital in an industry where the stakes are high, and the potential for financial loss is significant.