Trezor says your crypto is safe after Ledger audit exposes a hardware flaw
Key takeaways
- The issue affects “TROPIC01,” a security chip developed by Trezor sister company Tropic Square.
- Tropic Square later identified a related weakness that could expose additional information stored on the chip.
- An attacker would need physical possession of a device, expensive lab equipment and advanced technical expertise to attempt the attack.
The flaw affects only one of the wallet's multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit.By Margaux Nijkerk|Edited by Jamie Crawley Jun 3, 2026, 10:04 a.m. 1 min read Make preferred on What to know: Trezor disclosed a security flaw in the TROPIC01 chip used in its Safe 7 hardware wallet after Ledger's Donjon security team identified a successful laboratory attack, but the company says the vulnerability does not put user funds at risk.The flaw affects only one of the wallet's multiple security layers and would require physical access, specialized equipment and advanced expertise to exploit, with no evidence of real-world attacks or compromised devices.Hardware wallet maker Trezor disclosed a security flaw in a chip used in its new Safe 7 device but said customers' crypto remains secure and no action is needed.
The issue affects “TROPIC01,” a security chip developed by Trezor sister company Tropic Square. The flaw was uncovered during an independent audit by Ledger's security research team, Donjon, which used specialized laboratory equipment to bypass some of the chip's protections, according to an emailed announcement Wednesday.
Tropic Square later identified a related weakness that could expose additional information stored on the chip. However, Trezor said the vulnerability does not give attackers access to users' crypto holdings, private keys or wallet backups because the Safe 7 relies on multiple layers of security rather than a single chip.