Kraken Security Labs said they found a critical vulnerability in Trezor hardware wallets, opening up the ability to extract seed phrases within 15 minutes.
?It took Kraken Security Labs just 15 minutes to hack both of @trezor’S crypto hardware wallets.
Here’s how we did it and what it means if you’re a user: https://t.co/5betNtDnD0
– Kraken Exchange (@krakenfx) January 31, 2020
According to Kraken, an attacker needs physical access to a Trezor One or Trezor Model T device and an inexpensive device that can cause a microcontroller to malfunction due to a voltage drop in order to carry out an attack. The cost of such a device is approximately $ 75, experts say.
Kraken Security Director Nick Percoco emphasized that Trezor is aware of this vulnerability.
“The disadvantage lies in the hardware. You can’t just release an official update that would fix the problem for all users– Percoco said in a conversation with The Block. – To solve this problem, they essentially need to release a new device. ”
Shortly after the release of a Kraken blog post, Trezor reported that the attack could not be carried out remotely and was completely ruled out by enabling Passphrase.
Thank you! Trezor hardware wallet users are immune to this attack if they use a Passphrase feature.https: //t.co/YjJFQ5FUd1
– Trezor (@Trezor) January 31, 2020
“According to our research, physical access poses risks for 6-9% of users, – emphasized the developers of Trezor. – Attacks involving physical access are not widespread. ”
Recall, earlier, Kraken experts talked about a similar vulnerability in KeepKey hardware wallets. According to experts, these devices use the same chip family as Trezor.
Kraken is confident that the chips used in these wallets were not originally designed to store sensitive information and, therefore, should not be the only means of protecting crypto assets. Specialists recommended users to set code phrases in order to protect themselves from unauthorized access as much as possible.
Subscribe to ForkLog’s newsletter Twitter!
–
Found a mistake in the text? Highlight it and press CTRL + ENTER
