On August 13, Trezor disclosed that a data breach at its shipping partner, ShipMonk, exposed the personal information of roughly 13,700 recent customers, including names, phone numbers, and home addresses.<\/p>\n
Binance founder Changpeng Zhao (CZ) responded by arguing that the incident shows a real advantage of software self-custody wallets, since they don\u2019t require shipping a physical device that ties a buyer\u2019s identity to a home address.<\/p>\n
Trezor disclosed<\/a> the incident after ShipMonk, a logistics provider, notified the company on Monday, August 10, about unauthorized access to systems holding customer order data.<\/p>\n CZ reacted<\/a> on Thursday, contending that the incident highlights a different risk profile for hardware and software self-custody.<\/p>\n \u201cHardware wallets are often considered \u2018more secure\u2019 than software wallets,\u201d he wrote. \u201cWhile I still think that is \u2018generally true\u2019 in a few specific aspects, this incident reinforces an advantage of software self-custody wallets.\u201d<\/p>\n He pointed to examples such as Binance Web3 Wallet and Trust Wallet, which do not require shipping a physical device that ties a user\u2019s identity and address to crypto ownership.<\/p>\n CZ also stopped short of dismissing hardware wallets. \u201cNot saying hardware wallets are \u2018bad,’\u201d he wrote. \u201cJust different profiles.\u201d He added that YZiLabs is an investor in many hardware wallet companies.<\/p>\n Contributing to the debate, NaoX Protocol said<\/a> the exposed addresses could give attackers a list of verified crypto holders worth targeting in person. Bitcoin security executive Nick Neuman similarly warned<\/a> that the data could lead to targeted social engineering and potentially wrench attacks, where criminals use physical threats to steal funds.<\/p>\n Trezor said customers could face more sophisticated phishing through email, phone calls or letters. It urged users never to enter their wallet backup online or share it with anyone.<\/p>\n The timing adds to a run of bad headlines for hardware wallet makers. In mid-July, on-chain investigator ZachXBT called<\/a> the category unfit for serious use, writing on Telegram that \u201call hardware wallets are complete garbage.\u201d<\/p>\n He argued a spare phone used only for signing transactions could work better, citing dead batteries, forced firmware updates, and interface bugs as recurring problems. The Trezor breach is a different kind of failure, as it involves exposure through a vendor rather than the device, but it fits the same conversation about costs beyond the seed phrase.<\/p>\n Furthermore, last week, Galaxy Research linked<\/a> more than $100 million in stolen Bitcoin to a separate issue in older Coldcard firmware, which generated wallet seeds with weaker randomness than intended. Coinkite has patched the flaw in newer releases but cannot fix seeds already generated on affected devices and has told holders of its Mk3 through Q models to move funds to unaffected hardware.<\/p>\n This isn\u2019t the first time Trezor has found itself in such a situation, with a separate breach tied to a third-party support vendor exposing<\/a> contact details for around 66,000 users in January 2024.<\/p>\n The post CZ Says Software Wallets Avoid Risks Seen in Trezor Leak<\/a> appeared first on CryptoPotato<\/a>.<\/p>","protected":false},"excerpt":{"rendered":" On August 13, Trezor disclosed that a data breach at its shipping partner, ShipMonk, exposed the personal information of roughly 13,700 recent customers, including names, phone numbers, and home addresses. Binance founder Changpeng Zhao (CZ) responded by arguing that the incident shows a real advantage of software self-custody wallets, since they don\u2019t require shipping a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-213280","post","type-post","status-publish","format-standard","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/213280"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=213280"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/213280\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=213280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=213280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=213280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}A Rough Stretch for Hardware Wallets<\/h2>\n