Trezor Expands Wallet Security Features Following $100M Coldcard Exploit

TL;DR

• Trezor expands pockets most passphrase size from 50 to 128 characters.

• The replace follows July’s Coldcard vulnerability, which uncovered weaknesses in restoration phrase era and contributed to greater than $100 million in reported losses.

• Strong, distinctive passphrases helped defend some customers whose pockets backups had been compromised.

• The new restrict requires up to date Trezor Suite software program and suitable gadget firmware.

Trezor Strengthens Wallet Protection With Longer Passphrases

Hardware wallet manufacturer Trezor has expanded its passphrase restrict to 128 characters, giving customers an alternative choice for securing their cryptocurrency holdings following a collection of pockets safety incidents.

Announced on November 1, the change will increase the earlier 50-character ceiling and is accessible by up to date Trezor Suite software program and suitable gadget firmware. Older firmware retains the unique restriction.

A passphrase features as a further layer of safety alongside a pockets’s restoration phrase. Even if an attacker obtains the restoration phrase, entry to a passphrase-protected pockets requires the precise extra secret.

Trezor highlighted the significance of this characteristic following the July Coldcard incident, when a firmware vulnerability induced sure gadgets to generate restoration phrases with inadequate randomness. Attackers had been subsequently in a position to reconstruct weak pockets backups and steal cryptocurrency.

According to Trezor, some affected customers who had established robust, distinctive passphrases had been in a position to maintain their funds protected regardless of the compromised restoration data.

Coldcard Exploit Raises Questions About Hardware Wallet Security

The incident highlighted a critical weakness in cryptocurrency self-custody: {hardware} wallets are solely as safe because the methods answerable for producing and defending their non-public keys.

Reports positioned the losses related to the Coldcard vulnerability above $100 million, intensifying scrutiny of pockets producers and their safety practices.

Trezor has confused that wallets initially generated on its gadgets weren’t affected by the Coldcard firmware flaw. However, customers who created their restoration phrases on weak Coldcard gadgets and later restored them on Trezor stay uncovered till they switch their funds to a newly generated pockets.

The distinction is essential as a result of restoring a compromised restoration phrase on one other {hardware} pockets doesn’t get rid of the underlying vulnerability.

Longer Passphrases Require Careful Management

Although the expanded character restrict offers better flexibility, Trezor warns that passphrases stay a sophisticated safety characteristic.

Every completely different passphrase generates a separate pockets, that means even a minor typing error can open a wholly completely different pockets moderately than the one containing the consumer’s funds.

Lost or forgotten passphrases can’t be recovered by Trezor, doubtlessly leaving customers completely unable to entry their cryptocurrency.

The replace reinforces a broader lesson for the crypto trade: stronger safety will depend on a number of safeguards, from dependable key era to cautious restoration practices. Longer passphrases can add significant safety, however customers should retailer them securely and guarantee they will reproduce them precisely.