Trezor
Hack or exploit on May 25, 2023 · RDP downgrade attack
What happened
According to The Block, cybersecurity firm Unciphered claims it was able to hack into hardware-encrypted wallets powered by Trezor T models. In a YouTube demo, Unciphered showed exploiting the wallet vulnerability to extract the mnemonic private key from the wallet, saying the attack is only feasible if the attacker has physical access to the hardware wallet. Trezor CTO Tomáš Sušánka responded: "This appears to be a vulnerability called an RDP downgrade attack, which requires extremely sophisticated technical knowledge and advanced equipment. Even with the above conditions, Trezor can pass a powerful passphrase, making RDP downgrade attacks ineffective.” Trezor added that they have taken the important step of developing a new secure element for hardware wallets with their sister company Tropic Square to solve future problems.
Details
- Date
- May 25, 2023
- Kind
- Hack or exploit
- Method
- RDP downgrade attack
- How in
- Keys, accounts and infrastructure
- Target
- Wallet
- Chains
- not stated
Reported by
Related incidents
Trezor 2024 · Hack or exploit · undisclosed
User loses £55,000 (~$72,000) to Trezor phishing email 2022 · Scam · $72K
Trezor 2019 · Hack or exploit · undisclosed
SwanBluechip, "Trezor hack, May 25, 2023: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hteeb35c0822/ (data as of 2026-10-31).