Trezor

Pavol Rusnák and Marek Palatinus met at Prague’s brmlab in 2011, then worked with Alena Vránová on a device that isolated private keys. A prototype followed in 2012. SatoshiLabs incorporated and raised preorder funding in 2013; roughly 1,000 devices shipped in the first batch in 2014.⁠[2]

Model One launched on July 29, 2014, followed by Model T on February 26, 2018. These formed Trezor’s early hardware-wallet range.⁠[1]

Trezor introduced Shamir backup in 2019, extending wallet backup to a scheme with shares that can be stored separately.⁠[3]

SLIP-39 specifies mnemonic shares and recovery thresholds: reconstructing the secret requires enough shares, while fewer than the threshold reveal no information about the master secret. It supports thresholds both between and within groups; its format is generally incompatible with BIP-39 mnemonics.⁠[4]

On January 31, 2020, Kraken Security Labs disclosed a voltage-glitching attack on Model One and Model T that extracted encrypted seeds and cracked PINs after physical access. The researchers identified a passphrase, which is not stored on the device, as protection against obtaining the corresponding wallet through this attack.⁠[5]

Trezor Suite’s desktop release went live on July 14, 2021, combining setup, backup, transfers and trading-provider comparisons with Tor, discreet display and replace-by-fee functionality. A standalone app reduced exposure to counterfeit wallet websites without eliminating phishing risk.⁠[6]

On October 12, 2023, Trezor announced Safe 3 with a secure element, Keep Metal backup hardware and a 2,013-unit BitcoinBitcoinBitcoin (common symbol BTC) is an open peer-to-peer electronic cash protocol, network, and native digital asset. Full nodes independently verify transactions and blocks according to the consensus rules; transactions are recorded as UTXOs, and blocks are organized into a public ledger through proof of work. Bitcoin is not issued or managed by any single institution, but using, holding in custody, and trading it still involve key, privacy, market, and legal risks.Open the full entry-only Safe 3 edition. Preorders opened that day for planned mid-November shipping. Safe 3’s secure element was not the then-unreleased Tropic Square chip.⁠[7]

A third-party support platform used by Trezor suffered unauthorized access on January 17, 2024. The company subsequently warned that names or nicknames and email addresses for up to 66,000 contacts might have been exposed. Forty-one users received emails seeking recovery seeds; Trezor said it had found no seed disclosure or resulting loss of funds.⁠[8]

Safe 5 launched at BTC Prague on June 14, 2024. It added a haptic touchscreen and Gorilla Glass while retaining Safe 3’s secure element. New wallets defaulted to a 20-word SLIP-39 backup, with legacy 12- and 24-word options still available.⁠[9]

Trezor launched Safe 7 on October 21, 2025, introducing wireless connectivity and wireless charging to its device range.⁠[1]

Safe 7 combines TROPIC01, an Optiga secure element and an STM32U5 microcontroller, with encrypted Bluetooth, Qi2 charging and IP54 protection. Its post-quantum cryptography protects device authentication, firmware verification and boot integrity; blockchains themselves require separate upgrades.⁠[10]

Model One and Model T left Trezor’s online store on January 8, 2026, although resellers could retain stock. Trezor committed to basic maintenance through at least 2031 and critical security updates through at least 2036, with new-coin support for Model T through at least 2031.⁠[11]

In late January 2026, Ledger Donjon found a laser fault-injection vulnerability while testing TROPIC01 independently. Trezor explained that the attack exposed one protective secret, while the other two chips and the PIN still stood between an attacker and the wallet. The hardware flaw could not be fixed remotely; improvements were planned for a subsequent chip revision.⁠[12]

Shipping provider ShipMonk disclosed customer-data exposure in August 2026. Trezor initially identified 13,689 recent records and added approximately 67,000 older records in September, for 80,689 in total. The company said its wallet systems were not breached; exposed contact and shipping details increased phishing risk.⁠[13]

On September 7, 2026, Trezor introduced Clear Signing, displaying supported EVM contract actions, tokens, amounts and addresses on the device through Suite, WalletConnect and Trezor Connect. Coverage depends on ERC-7730 descriptors; unsupported contracts retain the blind-signing warning.⁠[14]

Email provider Brevo was attacked on September 9, 2026. In a September 17 update, Trezor confirmed that 347,149 subscriber email addresses had been exported. Attackers sent fake firmware-security notices seeking wallet backups. Trezor disabled the affected sending configuration and said its devices, wallets and internal systems were not compromised.⁠[15]

Firmware 2.13.0, dated October 21, 2026, raised the passphrase limit to 128 bytes and added StellarStellarStellar is an open payment and asset-issuance network launched by Jed McCaleb and Joyce Kim in July 2014. Its native asset is the lumen (XLM). Using the Stellar Consensus Protocol's federated Byzantine agreement model, it connects financial institutions, anchors, stablecoins and cross-border payments. Soroban smart contracts were introduced in 2024.Open the full entry Protocol 27 delegated authentication, contract creation and definitions for selected SEP-41 tokens.⁠[16]

The October Suite update added Arc, CSV trade-history exports and a LI.FI route for swapping Bitcoin to EVM chains, alongside improved Stellar Soroban-token support. Mobile additions included Cardano sending and message signing and verification.⁠[17]

On October 30, Trezor disclosed a suspected screen-reading implant in a Safe 5 sold through CryptoBilisCryptoBilisCryptoBilis is a Malaysia-born cryptocurrency commerce company and hardware-wallet reseller founded in 2020 by Arravind Prabu and others, which expanded into the Philippines and Indonesia; in October 2026 Ledger confirmed that some Ledger devices sold through it had been fitted with hardware implants, and funds were stolen from the affected wallets.Open the full entry. It had not received the device for confirmation or any report of lost funds. Having removed the reseller on October 9, it advised customers who bought from it since March to move their assets to a new wallet with a new seed as a precaution.⁠[18]

The October-update article published on November 1 described the new limit as 128 characters, versus 50 on older firmware. A passphrase derives a separate wallet and cannot be reset by the manufacturer if lost; using a longer one requires compatible updated firmware.⁠[19]

Trezor is part of SatoshiLabs, alongside trading service Invity, chip company Tropic Square and peer-to-peer trading app Vexl. The businesses operate separately. Marek Palatinus and Pavol Rusnák are Trezor cofounders.⁠[20]

Trezor’s firmware repository separates the Core implementation for Model T, Safe 3, Safe 5 and Safe 7 from Model One’s legacy implementation. It also publishes cryptography libraries, protocol definitions, tests and the Python client tool trezorctl.⁠[21]