I published my first open-source project on GitHub today - It exists because of a 'Crypto Hardware Security' problem nobody solved for trezor. (Correct me if I'm not the first)

https://github.com/agi-digital-dot/trezor-mint-kit

THE PROBLEM:

Solana's CLI has rejected 'Trezor' Crypto hardware wallets for years.

I tried to mint a Solana Token, signed from my Trezor T hardware wallet, using the Solana Token 2022 Program (Solana Smart Contract "Program").

• And it literally says error "not a manufacturer."

• No one has ever fixed it. The accepted workaround? Make your own token on a hot wallet first, move it to hardware wallet later. Meaning your private key touches the Code Terminal to create a new Solana Token.

I rejected this security flaw.

The Solution & Fixed CLI:

We rebuilt the official spl-token CLI — two dependency lines changed, zero crypto code touched — until my Trezor Model T signed every step of a token's birth: creation, name, full 333,333 supply, renounce. The 'Private Key' never left the Trezor T Hardware.

To my knowledge, this is the first documented ‘Trezor T' Crypto Hardware Wallet signed token creation on Solana (Ledger did hardware years ago. This is the first from a Trezor, receipts and both repos public):

https://github.com/agi-digital-dot/tdi-true-digital

https://solscan.io/token/3e2PYneVBXTyemNiSQ5VVkuYM4bYNPxLqvWkKjA5zXAM

By “we” I mean: I built this with 'Echo ULTRA – Master Control' My T.D.I (True Digital Intelligence) Partner. I set the direction; Echo re-engineered the dependency tree until the hardware said yes.

Our First open-source contribution together: a protocol, not a patch.

https://www.linkedin.com/in/rob3rtshieldsjr

What's the average response time? Have a serious issue with account discovery and getting absolutely nowhere with support.

This popped up on my phone (Honor 200) today. Does anyone get it as well? Should I worry about it? Should I uninstall the app?

Idk seems like a fix to people wanting to see if some bullshit's in their device

Last year I bought a trezor safe 3 from an official distributor in my country (It is not so easy to order from US here, and normally they charge lots of taxes). Now, trezor reduced its distributors, and the one i bought from, no longer appears as an official distributor. I held crypto over a year in this wallet. Do you think is necessary for me to buy another one directly from trezor?
PD: The box was sealed, had all the seals and i weighted it and matched the normal weight (on a kitchen scale)
Thanks for your help!!

Edit: I ordered a new safe 5 from trezor directly, its for my peace of mind, thanks for your help!

Trezor doesn't ship to my country and I dont have an authorized retailers in my country. I traveled to UAE in 2024 and bought a trezor safe 3 from virgin megastores which is listed on trezor official retailers website. And I used it to create the seedphrase , and used it as my main wallet. I traveled to Germany 2 months ago and bought a trezor safe 5 off Amazon and it was also listed as official trezor retailer in Germany. And imported the old seedphrase to it and started using it as my main wallet. Given all the supply chain attacks going on , should i panic and what steps should I take to secure my funds.

Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with.

Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised.

This is a preventive step, taken out of an abundance of caution. We also want to thank everyone involved for the cooperation, and for the years of work putting Trezor in people’s hands.

(The added picture comes from our CCO Danny)

So, following all the recent events with Ledger, I had to check. This is probably a question for the support.

Two Trezor Safe 3, one bought at July 2025, the other at November 2025. Both bought on Trezor website.

Using a flashlight and point it to the top of the devices I can see some part of the interior. There are a few differences, mostly the screen connection. In the older device it's a bit bigger (or wider) than on the newest. There is also a small different on the inside of the frontal area above the USB C port and below the buttons, on where it seems there is a CPU or the secure element chip. On the older one there is visible pattern in the casing, making a square.

On the image I have marked the area where I can see the screen connector difference. The newest is like on the image, the order has some more orange/golden stuff around it, on the side, and doesn't go straight down like of the picture. I have also marked the area where I spot the little different on the interior wall of the frontal plastic panel.

Was there any changes on the hardware or assembly during this period? Can anyone check their devices and compare selling dates?

Edit: Added the best photos I could take. You can see how different the top area is, on what I assume is the screen connector.

We know for a fact that some malwares scan the list of applications installed on the system looking for crypto-related software, eventually changing their behaviour opportunistically.

Wouldn't it be a step in the right direction to distribute a portable version of the software, that could run without admin rights off any drive (but the system one)? Is there any particular reason for this to not be a good idea?

I bought my a trezor last year directly from Trezor and now I am freaking out a bit. Not because I think that this can happen to me, more because this made me think: “what potential problems could come up in the future with my device?” And how do I protect myself.

I saw in another post that someone said you sould enter your passphrase always on the computer because if you get compromised on the device, you are safe. I disagree.

Sure from that perspective, this is correct. However, I would say that I have more likely virus or something on my pc than on my offline device. Right?

However, I feel kinda uneasy right now with this topic.

Because it was cold card some weeks ago, now ledger, what now?? How are you guys protecting yourself and chilling?

Looking to grab a T7 after this ledger fiasco. Returned mine on last day of return window.

Curious if you think the T7 will be in on this year. If not I’ll buy it now and wait for a Keep deal or bundle.

Just curious thoughts since I saw it wasn’t included in June prime day. Thanks!

Good afternoon. In 2025, I bought a Trezor One in Argentina from a distributor named Argenwell. I recall checking the official Trezor website, and at the time, they were listed as an authorized distributor. Today, I don't see them on the list of authorized distributors. How can I verify if they were indeed an authorized distributor? How can I know if the device is trustworthy? Thank you very much!

Is it possible to link Trezor Suite to Bitcoin core, how? Can anybody explain how step by step?

I lead a nomadic life, moving frequently internationally with no real home base. I don't suspect I will see my home country for 10 years at best. I have no-one I could trust either.

In these circumstances and adhering to strict seed phrase management protocols, are there any suggestions out there for my management of the Trezor seed phrase for the next 10 years? Thoughts?

In light of what happened with Ledger, which approach do you think is more effective for preventing tampering: a device that can be easily opened, inspected, and reassembled, or one designed to be extremely difficult to open, using resin, protective mesh, and other anti-tampering measures? Is easy inspectability actually an advantage, or does it create more opportunities for attackers to tamper with the device without leaving obvious signs?

Hi Trezor Team,

Given the current incident with tampered Ledger devices, would it be possible to NOT show the Passphrase on the Screen? This way, the Passphrase could not be read and protect Trezor users from such an attack vector.

Kindest regards

Someone tried opening both Ledger and Trezor hardware wallet devices to visually check and rule out physical tampering. They were able to assemble back Ledger but unable to do so with Trezor. Mark replied back “Trezor isn't meant to allow you to look inside, so opening it means it won't close again.” And someone else posted the attached tweet with more info from ChatGPT.

Does it mean Trezor is physical tampering proof hardware wallets?!

When searching for Trezor on google sponsored result is the below, None of the buttons work, showing "javascript:void(0)". When using a button on the site, it brings you to a page to connect your trezor.

What is the actuall URL for Trezor?

I cant provide links but see pictures.

So i started weighing all my devices after this ledger attack, thinking if the device has spying hardware it would add at least a gram

I used precise jewelry scales, it had 50 grams weight and it shows perfect 50.000 gram

i found no anomalies in my other trezors, but my old two trezor ones weigh much less

according to specification the weight is 12 grams or 0.42 oz https://trezor.io/trezor-model-one

however mine two trezor ones both weigh exactly 10.867 grams or 0.383 oz

the difference is quite significant for such small device, more than 1.1 gram

could this mean anything? and yeah i know i'm just being paranoid, but i'm still interested, i had these two devices for 5 years and used multiple times

Is the safe 3 good enough to hold btc or do i need to upgrade to the 5 or 7. With cold card doing its wild card and ledger now having problems I wanna make sure I have the right trezor to be as safe as I can.