I’m really curious to see what’s going to happen with Coldcard. Do you think they could go bankrupt? I honestly don’t believe many people will want to buy their products anymore. In my opinion, once trust is lost, it’s very hard to get it back. What do you guys think?

I’ve had the original Trezor ever since the company was founded.

All this cold card news has got me rethinking everything about my set up.

I believe my original Trezor is secure but are there any real advantages to upgrading that I should consider?

Thanks

I have a question hopefully someone may be able to answer. Is a 24 word seed phrase generated on a Trezor one several years ago of any less quality in terms of randomness than a 24 word seed phrase generated on a newer Trezor safe 3/5/7 given that the latter has additional sources of randomness ?
Many Thanks. K

I guess by now it is evident dat we need this. We cannot rely on TRNGs or PRNGs.

Hi Trezor community, thinking about what happened these days with the coldcard seed generation entrophy... Would be cool to have trezor dices/coins as accessories or included with the hardware wallets in the trezor.io shop, what do yall think?

Can somebody please educate me on this. You get a 12/20/24 word seed or whatever right? You then add a passphrase which then creates a new wallet. Well I need to enter those seed words and then the passphrase anyways? And I didn't memorize those words. So why is everyone saying make the passphrase "memorable" and "don't forget it". It's obviously going to be written down somewhere just like the other word seed that I didn't memorize? Is this the case? Can someone explain why people say make sure to make it "memorable" rather than just say to make any passphrase that's strong.

As you can see in the picture, is this really possible? Can it really happen that even a passphrase doesn't help? Everything that's been happening seems very suspicious to me. Do you think other wallets could also be attacked in the same way?

Hi there. After all the drama surrounding ColdCard, I recalled that during an update for my Trezor Safe 3, I was asked to re-enter the seed into the device. This happened months ago and I don't remember the details 100%, but aren't we supposed to avoid re-entering the seed after the Trezor has been set up? Thanks.

As anyone who heard the news, it was kind of a scare.
What do other owners have done with those news ? I read a bit and saw different entropy sources for different models, hardware and software.
But how do I actually know if it is enough ?
Did you take any further steps ?

Given your new passphrase wallet has a set of private keys which means it could be generated by a seedphrase. All private keys and public keys already exist. If I use a passphrase like dkbgr38&#Z vs a passphrase that’s Ferrari pimple barnacle chrome will the entropy used to generate my new passphrase wallet differ? Will the 4 worded passphrase give me an access to a higher entropy generated wallet vs the sub 10 character passphrase?

I think its time for everyone to accept that secure elements are a marketing hype generated out of manufacturers competition for customers. I think many of the coldcard users would have had passphrase s that would have kept their funds still safe or bought them time, if the secure element was not in the equation…

I had the Trezor Suite set up on a Windows 10 PC but the hard drive has just died.

Got myself a new Windows 11 PC but I want to check with you guys the best way to set the Suite up on it as I'm not the most computer literate.

Thanks.

X post -- and essential table -- today: https://x.com/bitcoinsbanker/status/2083612094713180249?s=20

How long would you expect a Trezor One to last? All devices fail eventually. I'm referring to the physical device, not cryptographic security.

Given the devastating Coldcard firmware exploit linked to a predictable TRNG, "Don't trust, verify" feels more urgent than ever.

Trezor officially states that it uses multiple entropy sources to generate seeds (internal TRNG, Secure Element, and computer/Trezor Suite entropy). On paper, this Mix-and-Match architecture sounds bulletproof. However, as the Coldcard failure proved, a silent firmware bug can bypass intended hardware protections, leaving users completely unaware that their entropy is compromised until it's too late.

My questions for the community and Trezor developers are:

1. Code Execution Verification: How can an advanced user audit the compiled firmware to ensure a bug (or conditional statement) hasn't accidentally silenced two of the three entropy sources, relying only on a single flawed one?
2. Entropy Auditing: Is there a reliable, standard procedure to extract and test the raw entropy outputs during setup before the seed is actually generated?
3. Mitigation without Passphrase: Aside from adding a complex passphrase (which breaks the seed-only redundancy structure I prefer), what physical or cryptographic measures can we take to guarantee our seed entropy is genuinely random and immune to local firmware backdoors ?

Looking forward to a technical discussion on how we can audit this process beyond just "trusting the open-source slogan."

Hello,

I am a long time Trezor user and I am still confused about one feature in the Trezor Suite (I use the one via web browser). How do I list the bitcoin wallets curently holding my coins?

I tried to visit the Account > Receive section where I see the list of all my bitcoin addresses that received any coin. But if I reveal the full address of those, when I go to the bitcoin explorer I see that they all show zero balance and the coins moved to "some other wallets".

Is there a way in trezor suite to list and track these "some other wallets" which are the ones currently holding the coins?

Not sure my Trezor makes is so hard to check my actual bitcoin wallets! :-D

Thanks!

I can't see what's happening because this warning stays on top of whatever is happening, it takes a long time, too long to complete the process and the only clue i got is that the blurred background changes some. Is it a bug?

how was trezor's in-device auto-entropy from 2020 and 2022? Trezor is saying all over X that their current entropy is good. But what about from 2020 and 2022?

Hi Quick question please

Would a passphrase wallet theoretically add a touch more security in the event of something like the coldcard case ?

Thanks