2 entries tagged hardware wallet. All writing.
SEPTEMBER 10, 2026 The Phishing Email Really Was From Trezor On September 9th roughly 347,000 people got an email from help@trezor.io warning them about a chip flaw in their wallet and pointing them somewhere to check it. It was a phishing attack — and it came from Trezor's real domain, passed every authentication check a mail server performs, and borrowed its cover story from two vulnerabilities that are genuinely real. This is Trezor's second breach in a month and its third this year, and not one of them touched the device. AUGUST 4, 2026 A Twenty-Five-Minute Window, and Why I Split the Key A firmware bug sat undetected for five years, then drained over a hundred million dollars from Coldcard wallets in one week. Why I have never trusted a single device with all of mine, and what my Bitkey actually does.