Trezor confirmed that users' cryptocurrency holdings remain secure after Ledger's security research team, Donjon, uncovered a hardware flaw in the TROPIC01 chip used in the company's new Safe 7 hardware wallet. The vulnerability was identified during an independent audit and required specialized laboratory equipment to exploit, according to an announcement from Trezor on Wednesday.

Market Context

The disclosure comes as hardware wallet adoption continues growing amid heightened concerns about cryptocurrency security. Hardware wallets are considered among the safest methods for storing digital assets because they keep private keys in air-gapped, offline environments. The incident represents a rare instance of direct collaboration between two of the industry's biggest competitors, with Trezor actively praising Ledger's transparency in disclosing the findings.

Analysis

The flaw affects only one security layer within the Safe 7's multi-layered architecture. According to Trezor, an attacker would need physical possession of the device, expensive laboratory equipment, and advanced technical expertise to attempt exploitation. The vulnerability does not grant access to users' crypto holdings, private keys, or wallet backups because the Safe 7 relies on multiple independent security mechanisms rather than depending solely on the compromised chip. Tropic Square, the Trezor sister company that developed the TROPIC01 chip, later identified a related weakness that could expose additional information stored on the device. However, no evidence suggests the flaw has been exploited in real-world scenarios.

Trezor CEO Matej Žák emphasized that the open process by which the vulnerability was discovered and disclosed represents the standard the industry should follow. The collaboration between rivals highlights an emerging trend of coordinated responsible disclosure within cryptocurrency security research, where competitors work together to strengthen ecosystem-wide protection rather than exploit findings for competitive advantage.

Key Numbers

- Safe 7 uses multiple security layers beyond the affected TROPIC01 chip

- Exploitation requires physical device access plus specialized lab equipment

- No confirmed real-world exploits as of publication date

- Vulnerability discovered through independent audit by Ledger's Donjon team

What to Watch

Users of Trezor Safe 7 devices should monitor for any firmware updates from the company. The broader hardware wallet industry may see increased emphasis on multi-chip architectures that prevent single-point failures. Watch for potential responses from competing wallet manufacturers and whether this disclosure encourages more cross-industry security collaborations. Additional details about the specific nature of the chip vulnerability are expected in forthcoming technical documentation from Tropic Square.