News · Cointelegraph

Trezor lifts password ceiling after Coldcard’s $100M wallet thefts

Hardware wallet maker Trezor has raised the maximum length of optional passphrases from 50 to 128 characters, available in Trezor Suite with updated firmware, while older firmware still caps passphrases at 50 characters. The change follows the July Coldcard attacks, when a firmware flaw led some devices to generate recovery phrases with insufficient randomness, and strong, unique passphrases protected some affected users. Separately, Trezor advised customers who bought wallets from former reseller CryptoBilis since March to move their funds, after an Indonesian customer reported a suspected implant in a Trezor Safe 5 that could capture recovery phrases; Trezor said it had not examined the device and had received no reports of related losses.

Summary written by Upside AI from the original article. Read the source for full details.

Read the original on Cointelegraph ↗

Keywords

Trezorcryptocybersecurity

Open a keyword to see other news on the same topic.

Related tickers and likely impact

BTC/USDT

• Neutral

Bitcoin

Relevance: low

MarketCrypto
ExchangeBinance
SectorLayer 1
Market cap$1.6T
Close on 11/01/202678,354.00
Change that session+1.00%
BTC/USDT price, forecasts and signals →

Impact is scored by AI from the headline and may be wrong. It is not investment advice.

Related news

  • Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5

    Trezor said it received a credible report of a hardware implant in a Safe 5 bought from reseller CryptoBilis in August 2026, though it has not yet examined the device. The reported implant reads the wallet backup from the screen and sends it over a mobile network, similar to Ledger's case, and the details have not been verified by Trezor. Trezor urged anyone who bought its wallets from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase, and said no buyer has reported a loss of funds. Trezor removed CryptoBilis as a reseller on October 9 and has inspected 4 devices bought from it without finding evidence of tampering.

    Decrypt·cryptocrypto walletscybersecurity
  • Trezor warns CryptoBilis buyers to move funds over suspected implant

    Trezor urged customers who bought its hardware wallets from former reseller CryptoBilis since March to move their funds, after a report of a suspected unauthorized circuit board in a Trezor Safe 5 bought on Tokopedia in August. According to the report, the device could capture screen information, including wallet recovery phrases, and transmit it over a cellular network. Trezor has not yet examined the device and has received no reports of losses, and described sales through the reseller as “very small” without providing figures. The company is reviewing its hardware protections, as seals and packaging are not sufficient on their own, and plans to reduce its reseller network, announced on October 13. Earlier, Ledger wallets sold through CryptoBilis were found to contain an implant, and security researcher Joe Grand had alerted Trezor in August about tampered wallets.

    Cointelegraph·cryptocybersecurityTrezor
  • Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain

    Ledger has asked resellers and distributors in six Southeast Asian countries and Hong Kong to suspend sales and pull its hardware wallets from shelves while it investigates devices fitted with a hidden implant. The implant reads the 24-word recovery phrase during setup and sends it out over LTE, so anyone holding that phrase can move the wallet's funds. All confirmed losses involve devices sold through CryptoBilis, a regional reseller, and Ledger has not verified any drain linked to devices bought elsewhere, nor sees any indication its own systems were compromised. Onchain investigator Specter has traced more than $86 million in suspected thefts, a figure Ledger has not verified. MediaMarkt Saturn stopped selling Ledger devices after a German customer reported an implant, though no funds were lost, and rival Trezor will end reseller authorizations on January 1, 2027 as a precaution.

    Decrypt·cryptocybersecurityLedger
  • Trezor reduces resellers as a ‘preventative step’ amid Ledger tampering reports

    Hardware wallet maker Trezor said it will reduce its number of resellers as a “preventive step” following reports that malicious implants were found in competitor Ledger’s devices. Chief commercial officer Danny Sanders said certain resellers will be removed from the authorized list on January 1 and will stop receiving Trezor shipments from Tuesday. Trezor said there is “not a single piece of evidence” that its own devices have been compromised, while Ledger confirmed that at least one device sold by reseller CryptoBilis in Southeast Asia contained an unauthorized implant that captured recovery phrases. Researchers estimate losses of between $72 million and $86 million, though Ledger has not confirmed the total number of affected users or value lost. CryptoBilis suspended all hardware wallet sales, and the parent company of MediaMarkt removed all Ledger products from its stores and online platforms.

    Cointelegraph·TrezorLedgercrypto
  • Trezor Cuts Its Resellers After Ledger Finds Spy Implant in Crypto Wallets

    Trezor will end its reseller authorizations on January 1, 2027 and stop shipping new stock to them, calling it a precaution after supply-chain incidents and saying there is no evidence its devices were compromised. The move follows Ledger's Donjon team finding that wallets sold by Southeast Asian reseller CryptoBilis carried a spy implant that captures recovery phrases from the screen and sends them over LTE. Ledger told anyone who bought from CryptoBilis in the past 90 days not to set up their device, while onchain investigator Specter traced more than $86 million in suspected thefts, a figure Ledger says it has not verified. Trezor says CryptoBilis was already off its seller list and that it has received no reports of tampered devices from that retailer. Separately, a ShipMonk data exposure in August affected Trezor customers, with the total put at 80,689 in September, though Trezor says its devices, private keys and wallet backups were not affected.

    Decrypt·cryptocybersecurityTrezor
  • Bitcoin eases to $77,900 as Binance customers pull $3.6 billion after withdrawals reopenCoinDesk·▼ BTC/USDT▼ BNB/USDTbitcoincryptoBinance

Related markets

Crypto →

Latest news

  • FPT Loses VND 120,000 Billion in Market Value Over Chairman Trương Gia Bình's “Rebirth” Performance

    FPT shares fell 4.74% to VND 50,200 per share on November 2, their lowest level in three years, and the stock has lost over VND 120,800 billion in market value since early February 2025, even as profit kept growing double digits. Pressure has come from sustained foreign net selling, with over 210 million shares (nearly VND 17,000 billion) sold in the first 10 months of 2026, and concerns that AI could reshape traditional software outsourcing, a worry that also weighs on peers such as Infosys and Accenture. Yet FPT posted record Q3 2026 profit attributable to parent shareholders of VND 2,723 billion, and nine-month profit reached VND 7,778 billion, up 13.3%. Vietcap Securities forecasts FPT's profit growth at an average of 14% a year over 2026–2029, below the 22% recorded in 2021–2024.

    CafeF·▼ FPTFPTearningsforeign investors
  • YieldMax® ETFs Announces Distributions on MSST, NVIT, and TEST

    YieldMax announced Group 3 distributions for its Performance & Distribution Target 25™ ETFs, with the ex-date and record date of November 3, 2026 and payment on November 4, 2026. The funds seek a 25% target annual income level, which the company says is not a guaranteed yield or total return. Distributions are not guaranteed, may vary significantly or be zero, and may include return of capital, which can reduce NAV and trading price over time.

    Yahoo Finance·ETFdividendsinvestment trusts
  • Prediction: Netflix Will Begin Paying a Dividend in 2027 and Beat the S&P 500 During the Next Decade

    The author predicts Netflix will begin paying a dividend in 2027, after its stock fell 7% over the past five years while the Nasdaq Composite rose 75% and the S&P 500 rose 66%. Revenue and earnings are at record highs but are inflated by a one-time $2.8 billion termination fee from Skydance, and full-year 2026 advertising revenue is now projected at $2.7 billion, down from $3 billion. Netflix bought back 63.9 million shares for $4.8 billion in Q3 2026, its largest quarterly repurchase ever, and has $22.3 billion of authorized buybacks remaining; the author views the size of these buybacks as the best signal a dividend could be coming. Analysts' average estimate is $3.77 in 2027 EPS, up 5.3% from $3.58 in 2026, and the stock trades at 16.4 times projected 2026 earnings versus 18.7 for the S&P 500.

    Yahoo Finance·Netflixdividendsshare buybacks
  • Medallion reports high-grade drill results at Kundip Mining Centre

    Medallion Metals has released final results from its 2026 infill drilling programme at the Gem deposit within the Kundip Mining Centre in Western Australia, where the Ravensthorpe Gold Project is under development. The programme comprised 22 reverse circulation and diamond holes totalling 3,093m across the upper levels, largely confirming earlier high-grade results in zones targeted for early development. Key intercepts included 3m at 17.8 g/t gold and 0.3% copper from 66m, and 2m at 21.3 g/t gold and 0.8% copper from 58m. The company said the results strengthen confidence in the grade, width and geometry of the lodes, and several short-strike lodes were closed off as expected. Project development is progressing, with box-cut excavation at 55% completion, underground development scheduled to start in November 2026, and first underground ore expected in the second quarter of 2027.

    Yahoo Finance·goldminingAustralia
  • C3 Metals Intersects 64.9 Metres at 3.45% Copper Equivalent, Including 23.3 Metres at 6.64% Copper Equivalent at its Khaleesi Project, Peru - Highest Grade Copper and Gold Mineralization Intersected to Date at Khaleesi

    C3 Metals (TSXV: CCCM) intersected 64.9 metres at 3.45% copper equivalent (2.53% copper, 0.87 g/t gold, 11.6 g/t silver) in drill hole KHZ5790-005 at its 100%-owned Khaleesi copper project in southern Peru, including 23.3 metres at 6.64% copper equivalent. The company says these are the highest copper grades encountered to date at Khaleesi, and follow-up drilling is underway to test the geometry, continuity and extent of the high-grade mineralization. Copper equivalent uses three-year trailing average prices for 2023–2025 and assumes 80% metallurgical recovery. All intervals are downhole core lengths, and true thicknesses have not yet been determined.

    Yahoo Finance·goldcommoditiesmining
  • Apple's new CEO faces earnings test as rising chip costs cloud outlook

    Apple reports quarterly results on Monday evening, the first since John Ternus replaced Tim Cook as CEO in September. According to LSEG estimates reported by Reuters, revenue is expected to rise nearly 11% to $113.39 billion and net profit about 6% to $29.04 billion. iPhone revenue is forecast to grow about 15% to $56.54 billion, slowing from roughly 22% in the previous three months, while services revenue may rise almost 10% to $31.56 billion, its slowest pace in more than three years. Investors will watch Christmas-quarter guidance, sales of the iPhone Duo foldable (on sale from 23 October, after the reporting period, starting at $1,999 in the US) and rising memory-chip costs, with TechInsights estimating memory and storage in the iPhone 18 Pro at about $196, versus roughly $52 in the iPhone 17 Pro.

    Yahoo Finance·▼ AAPLAAPLearningssemiconductors

All news →

Get the briefing on Telegram or Zalo

Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.