COINTELEGRAPH · 2026-11-02 10:47 UTC

Trezor lifts password ceiling after Coldcard's $100M wallet thefts

Trezor increased maximum passphrase length from 50 to 128 characters in updated firmware, citing Coldcard's July attacks where a firmware flaw caused insufficient randomness in recovery phrase generation. Trezor advised customers who purchased wallets from reseller CryptoBilis since March to move funds after an Indonesian customer reported a suspected implant in a Trezor Safe 5 that could capture recovery phrases.

Loading the story on Tree News…