The Ledger Donjon team found out that attackers can get access to the means of users of the device for storing cryptocurrency in 5 minutes, using tools for $ 100.
Trezor One, Trezor T, Keepkey hardware wallets and other company devices can be hacked in under 5 minutes with $ 100 worth of tools, security experts at Ledger Donjon say. According to them, success with a probability of 100% is achieved on any firmware versions.
Experts reported that they checked the hacking method on 20 wallets and in all cases they managed to get a “sid”. Ledger Donjon stressed that the malfunction can not be fixed by software updates.
Security experts also said that they sent a request to Trezor in December 2018, but did not receive an award. According to programmers, the company was already aware of this possibility of hacking devices.
In March, Ledger reported detecting several critical vulnerabilities in Trezor devices. The next day, company representatives said that some of the faults had been fixed, and the remaining problems were related to physical access.