Trezor says Safe 7 chip flaw found by Ledger does not put funds at risk

Hardware wallet company Trezor and chipmaker Tropic Square have disclosed a vulnerability in one of three independent security layers in the Trezor Safe 7 hardware wallet, saying the flaw does not put user funds at risk.

The vulnerability was identified during an independent security audit conducted by Ledger Donjon, the security research team at rival hardware wallet maker Ledger, according to a Trezor statement sent to Cointelegraph.

Tropic Square provided the affected TROPIC01 Secure Element chip to the Ledger Donjon team for an independent audit. Trezor said compromising TROPIC01 alone would not be enough to access a user’s wallet, PIN or funds because Safe 7 relies on multiple independent security layers, including another secure element.

The disclosure offers a rare public look at how hardware wallet makers handle chip-level security flaws and highlights the growing role of independent researchers in testing crypto custody devices.

Flaw surfaced during independent security testing

According to Trezor, the vulnerability