Hardware hacker found two Trezors with the main chip replaced.
Neither generated a random recovery phrase. Each picked one of about a dozen the attacker already knew, and one had a micro SD card soldered inside holding genuine firmware to pass the authenticity check.
Both came from unauthorised sellers. One was on Facebook Marketplace.
https://ungovernable.network/shows/bitcoin-brief/more-compromised-hardware/
Ungovernable
npub1jc…n2890
2026-10-21 13:00:00 UTC
Author Public Key
npub1jcympy69pht7ptan39se4nd09e4q66qhey649uu3rczm2zh88c7s0n2890Seen on
wss://relay.damus.ioPublished at
2026-10-21 13:00:00 UTCEvent JSON
{
"id": "7cacd43e30bddffd8953718701a8e8047b6f2fdc81fd037efad3b8c17b6045b6",
"pubkey": "9609b093450dd7e0afb389619acdaf2e6a0d6817c93552f3911e05b50ae73e3d",
"created_at": 1792587600,
"kind": 1,
"tags": [],
"content": "Hardware hacker found two Trezors with the main chip replaced.\n\nNeither generated a random recovery phrase. Each picked one of about a dozen the attacker already knew, and one had a micro SD card soldered inside holding genuine firmware to pass the authenticity check.\n\nBoth came from unauthorised sellers. One was on Facebook Marketplace.\n\nhttps://ungovernable.network/shows/bitcoin-brief/more-compromised-hardware/\n\nhttps://video.nostr.build/e570efc0aa26aeb1e1532a115748ff3a4337520a04df1fb596adccc23a8f7297.mp4",
"sig": "832b274f3f3accc026cf8909f868dd6127c3fa74f1624ee84d6289fa8a08d49b25e3d33752c9c9c4b0bfe89f2219ad63296ebb5a9cd95382c55f0238a3f61772"
}