分類帳Donjon揭示了Trezor的Safe 3和Safe 5型號中的關鍵缺陷

加密貨幣行業的競爭是否促使Ledger攻擊Trezor，還是對所有用戶的及時警告？這個啟示背後是一個主要問題：錢包的安全。

The fierce competition in the crypto industry has led to an interesting revelation.

加密業的激烈競爭導致了一個有趣的啟示。

According to Ledger, Trezor’s Safe 3 and Safe 5 models had a critical flaw that could be exploited to gain access to users’ funds. However, Trezor responded promptly by applying a patch for this flaw.

根據萊傑（Ledger）的說法，特雷佐（Trezor）的《安全3》和《安全5型號》具有一個關鍵的缺陷，可以利用該缺陷以獲得用戶的資金。但是，Trezor迅速響應了此缺陷的補丁。

This discovery is sure to spark debate about the relative security of different hardware wallets.

該發現肯定會引發有關不同硬件錢包的相對安全性的辯論。

According to reports by Ledger Donjon, the cybersecurity research branch of Ledger, Trezor’s wallets Safe 3 and Safe 5 had a critical vulnerability.

根據萊傑（Ledger）的網絡安全研究部門Ledger Donjon的報導，Trezor的錢包Safe 3和Safe 5具有關鍵的脆弱性。

While studying the security of these models, researchers at the Ledger company found that cryptographic operations were performed on a microcontroller, which is vulnerable to advanced physical attacks.

在研究這些模型的安全性時，Ledger Company的研究人員發現，在微控制器上進行了加密操作，該操作很容易受到高級物理攻擊的影響。

The problem is that a hypothetical attacker could modify the firmware and bypass the integrity check, making it possible to access users’ digital assets.

問題在於，假設的攻擊者可以修改固件並繞過完整性檢查，從而可以訪問用戶的數字資產。

“We believe that strengthening the crypto ecosystem benefits everyone,” said Charles Guillemet, CTO of Ledger.

萊傑（Ledger）首席技術官查爾斯·吉勒梅特（Charles Guillemet）說：“我們認為，加強加密生態系統使每個人都受益。”

This discovery is sure to raise questions about the robustness of competing wallets.

這一發現肯定會引起有關競爭錢包魯棒性的問題。

Trezor responded promptly by applying a patch, demonstrating its commitment to security.

Trezor迅速做出了應用程序，並證明了其對安全性的承諾。

However, this incident highlights a troubling reality: security flaws are not just anomalies, but ongoing threats.

但是，這一事件突出了一個令人不安的現實：安全缺陷不僅是異常，而且是持續的威脅。

If a breach has been patched today, how many more remain to be discovered in the world of crypto wallets?

如果今天違反了違規行為，那麼在加密錢包的世界中還有多少尚待發現？

Crypto wallet: the race for security continues

加密錢包：安全競賽仍在繼續

Hardware wallets are supposed to be the ultimate vault for digital assets, but this incident shows that none are infallible. Trezor introduced Secure Elements, chips designed to protect private keys against physical attacks.

硬件錢包應該是數字資產的終極保險庫，但此事件表明沒有一個無誤。 Trezor引入了安全的元素，旨在保護私鑰免受物理攻擊的芯片。

However, Ledger revealed that this protection could be bypassed via the microcontroller, rendering the flaw exploitable.

但是，Ledger透露，可以通過微控制器繞過此保護，從而使缺陷可利用。

Facing the threat, Trezor recalled that its firmware has an integrity check to prevent any malicious modifications. But Ledger demonstrated that this protection could be bypassed by a determined attacker. A simple physical access could compromise a crypto wallet, a worrying situation for altcoin and bitcoin investors.

面對威脅，特雷佐爾回憶說，其固件具有完整性檢查，以防止任何惡意修改。但是萊傑證明，這種保護可以被堅定的攻擊者繞過。簡單的物理訪問可能會損害加密錢包，這是Altcoin和Bitcoin Investors令人擔憂的情況。

Some notable figures:

一些值得注意的數字：

If traders and holders of digital assets thought that their wallet was impregnable, this incident reminds them that caution is necessary.

如果數字資產的貿易商和持有人認為他們的錢包是可以堅不可摧的，那麼這一事件提醒他們需要謹慎。

Cybersecurity: an ongoing challenge for crypto wallets

網絡安全：加密錢包的持續挑戰

In the world of digital assets, cybersecurity is a never-ending battle. Trezor and Ledger strive to improve the protection of their wallets, but hackers continue to refine their techniques. Every innovation brings its share of vulnerabilities, turning security into a game of cat and mouse.

在數字資產的世界中，網絡安全是一場永無止境的戰鬥。 Trezor和Ledger努力改善其錢包的保護，但黑客繼續完善其技術。每項創新都帶來了其脆弱性的份額，將安全性變成了貓和鼠標的遊戲。

The latest flaw highlights an underestimated risk: physical attacks via the supply chain. In theory, a malicious actor could compromise a crypto wallet even before it’s purchased by a user, thus opening a sneaky breach in the protection of digital assets.

最新的缺陷突出了被低估的風險：通過供應鏈進行物理攻擊。從理論上講，惡意演員甚至在用戶購買之前就可以妥協加密錢包，從而打開偷偷摸摸的違反數字資產的違規行為。

Ledger emphasizes the importance of Secure Elements and firmware integrity checks to prevent unauthorized access. Yet, even with these measures, threats are constantly evolving. As Trezor stated:

Ledger強調了安全元素和固件完整性檢查的重要性，以防止未經授權的訪問。但是，即使採取了這些措施，威脅也在不斷發展。如特雷佐爾所說：

In cybersecurity, the golden rule is simple: nothing is infallible.

在網絡安全方面，黃金法則很簡單：沒有什麼是無誤的。

A statement that resonates as attack methods become increasingly sophisticated.

隨著攻擊方法的共鳴，一項聲明變得越來越複雜。

Some concerning elements:

一些有關元素的信息：

How far will manufacturers have to go to secure crypto wallets? Should we expect new flaws or innovations capable of eradicating these risks? One thing is certain, the crypto industry must redouble its vigilance, as attackers, themselves, never sleep.

製造商將必須走多遠才能確保加密錢包？我們應該期望能夠消除這些風險的新缺點或創新嗎？可以肯定的是，加密行業必須加倍警惕，因為攻擊者本身永遠不會睡覺。

This flaw reminds us that the security of wallets does not solely rely on technology, but also on the vigilance of users. Ledger itself has been a victim of phishing campaigns and data leaks in the past. Nothing is ever completely secure in the crypto universe, and staying alert remains the best protection.

這個缺陷提醒我們，錢包的安全不僅依賴於技術，而且還依賴用戶的警惕。 Ledger本身一直是過去的網絡釣魚活動和數據洩漏的受害者。在加密貨幣宇宙中，沒有什麼完全安全的，並且保持警覺仍然是最好的保護。

Maximize your Cointribune experience with our "Read to Earn" program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.

通過我們的“閱讀賺取”計劃最大化您的共同成員體驗！對於您閱讀的每篇文章，請賺取積分並獲得獨家獎勵。立即註冊並開始賺取福利。

La révolution blockchain et crypto est en marche ! Et le jour où les impacts se feront ressentir sur l’économie la plus vulnérable de ce Monde, contre toute espérance, je dirai que j’y étais pour quelque chose

區塊鍊和加密革命正在進行中！而那一天，將對這個世界上最脆弱的經濟感受到影響的那一天，我會說我在那裡是為了什麼