分类帐Donjon揭示了Trezor的Safe 3和Safe 5型号中的关键缺陷

加密货币行业的竞争是否促使Ledger攻击Trezor，还是对所有用户的及时警告？这个启示背后是一个主要问题：钱包的安全。

The fierce competition in the crypto industry has led to an interesting revelation.

加密业的激烈竞争导致了一个有趣的启示。

According to Ledger, Trezor’s Safe 3 and Safe 5 models had a critical flaw that could be exploited to gain access to users’ funds. However, Trezor responded promptly by applying a patch for this flaw.

根据莱杰（Ledger）的说法，特雷佐（Trezor）的《安全3》和《安全5型号》具有一个关键的缺陷，可以利用该缺陷以获得用户的资金。但是，Trezor迅速响应了此缺陷的补丁。

This discovery is sure to spark debate about the relative security of different hardware wallets.

该发现肯定会引发有关不同硬件钱包的相对安全性的辩论。

According to reports by Ledger Donjon, the cybersecurity research branch of Ledger, Trezor’s wallets Safe 3 and Safe 5 had a critical vulnerability.

根据莱杰（Ledger）的网络安全研究部门Ledger Donjon的报道，Trezor的钱包Safe 3和Safe 5具有关键的脆弱性。

While studying the security of these models, researchers at the Ledger company found that cryptographic operations were performed on a microcontroller, which is vulnerable to advanced physical attacks.

在研究这些模型的安全性时，Ledger Company的研究人员发现，在微控制器上进行了加密操作，该操作很容易受到高级物理攻击的影响。

The problem is that a hypothetical attacker could modify the firmware and bypass the integrity check, making it possible to access users’ digital assets.

问题在于，假设的攻击者可以修改固件并绕过完整性检查，从而可以访问用户的数字资产。

“We believe that strengthening the crypto ecosystem benefits everyone,” said Charles Guillemet, CTO of Ledger.

莱杰（Ledger）首席技术官查尔斯·吉勒梅特（Charles Guillemet）说：“我们认为，加强加密生态系统使每个人都受益。”

This discovery is sure to raise questions about the robustness of competing wallets.

这一发现肯定会引起有关竞争钱包鲁棒性的问题。

Trezor responded promptly by applying a patch, demonstrating its commitment to security.

Trezor迅速做出了应用程序，并证明了其对安全性的承诺。

However, this incident highlights a troubling reality: security flaws are not just anomalies, but ongoing threats.

但是，这一事件突出了一个令人不安的现实：安全缺陷不仅是异常，而且是持续的威胁。

If a breach has been patched today, how many more remain to be discovered in the world of crypto wallets?

如果今天违反了违规行为，那么在加密钱包的世界中还有多少尚待发现？

Crypto wallet: the race for security continues

加密钱包：安全竞赛仍在继续

Hardware wallets are supposed to be the ultimate vault for digital assets, but this incident shows that none are infallible. Trezor introduced Secure Elements, chips designed to protect private keys against physical attacks.

硬件钱包应该是数字资产的终极保险库，但此事件表明没有一个无误。 Trezor引入了安全的元素，旨在保护私钥免受物理攻击的芯片。

However, Ledger revealed that this protection could be bypassed via the microcontroller, rendering the flaw exploitable.

但是，Ledger透露，可以通过微控制器绕过此保护，从而使缺陷可利用。

Facing the threat, Trezor recalled that its firmware has an integrity check to prevent any malicious modifications. But Ledger demonstrated that this protection could be bypassed by a determined attacker. A simple physical access could compromise a crypto wallet, a worrying situation for altcoin and bitcoin investors.

面对威胁，特雷佐尔回忆说，其固件具有完整性检查，以防止任何恶意修改。但是莱杰证明，这种保护可以被坚定的攻击者绕过。简单的物理访问可能会损害加密钱包，这是Altcoin和Bitcoin Investors令人担忧的情况。

Some notable figures:

一些值得注意的数字：

If traders and holders of digital assets thought that their wallet was impregnable, this incident reminds them that caution is necessary.

如果数字资产的贸易商和持有人认为他们的钱包是可以坚不可摧的，那么这一事件提醒他们需要谨慎。

Cybersecurity: an ongoing challenge for crypto wallets

网络安全：加密钱包的持续挑战

In the world of digital assets, cybersecurity is a never-ending battle. Trezor and Ledger strive to improve the protection of their wallets, but hackers continue to refine their techniques. Every innovation brings its share of vulnerabilities, turning security into a game of cat and mouse.

在数字资产的世界中，网络安全是一场永无止境的战斗。 Trezor和Ledger努力改善其钱包的保护，但黑客继续完善其技术。每项创新都带来了其脆弱性的份额，将安全性变成了猫和鼠标的游戏。

The latest flaw highlights an underestimated risk: physical attacks via the supply chain. In theory, a malicious actor could compromise a crypto wallet even before it’s purchased by a user, thus opening a sneaky breach in the protection of digital assets.

最新的缺陷突出了被低估的风险：通过供应链进行物理攻击。从理论上讲，恶意演员甚至在用户购买之前就可以妥协加密钱包，从而打开偷偷摸摸的违反数字资产的违规行为。

Ledger emphasizes the importance of Secure Elements and firmware integrity checks to prevent unauthorized access. Yet, even with these measures, threats are constantly evolving. As Trezor stated:

Ledger强调了安全元素和固件完整性检查的重要性，以防止未经授权的访问。但是，即使采取了这些措施，威胁也在不断发展。如特雷佐尔所说：

In cybersecurity, the golden rule is simple: nothing is infallible.

在网络安全方面，黄金法则很简单：没有什么是无误的。

A statement that resonates as attack methods become increasingly sophisticated.

随着攻击方法的共鸣，一项声明变得越来越复杂。

Some concerning elements:

一些有关元素的信息：

How far will manufacturers have to go to secure crypto wallets? Should we expect new flaws or innovations capable of eradicating these risks? One thing is certain, the crypto industry must redouble its vigilance, as attackers, themselves, never sleep.

制造商将必须走多远才能确保加密钱包？我们应该期望能够消除这些风险的新缺点或创新吗？可以肯定的是，加密行业必须加倍警惕，因为攻击者本身永远不会睡觉。

This flaw reminds us that the security of wallets does not solely rely on technology, but also on the vigilance of users. Ledger itself has been a victim of phishing campaigns and data leaks in the past. Nothing is ever completely secure in the crypto universe, and staying alert remains the best protection.

这个缺陷提醒我们，钱包的安全不仅依赖于技术，而且还依赖用户的警惕。 Ledger本身一直是过去的网络钓鱼活动和数据泄漏的受害者。在加密货币宇宙中，没有什么完全安全的，并且保持警觉仍然是最好的保护。

Maximize your Cointribune experience with our "Read to Earn" program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.

通过我们的“阅读赚取”计划最大化您的共同成员体验！对于您阅读的每篇文章，请赚取积分并获得独家奖励。立即注册并开始赚取福利。

La révolution blockchain et crypto est en marche ! Et le jour où les impacts se feront ressentir sur l’économie la plus vulnérable de ce Monde, contre toute espérance, je dirai que j’y étais pour quelque chose

区块链和加密革命正在进行中！而那一天，将对这个世界上最脆弱的经济感受到影响的那一天，我会说我在那里是为了什么