Your keys, examined
Filed under
10 articles carry this label
News Trezor Security Self-custody
Check a Trezor Suite installer with GPG before you run it: the v26.9.2 filenames, the SatoshiLabs key fingerprint, and what a good signature cannot catch.
Continue reading: How to verify a Trezor Suite download is genuine
Trezor Security Self-custody Privacy
Yes, if it was strong and never leaked with the seed. The BIP-39 mechanism, which theft scenarios a Trezor passphrase survives, and the ones it does not.
Continue reading: Does a Trezor passphrase protect you if your seed is stolen?
News Trezor Security Hardware Wallets
You entered your Trezor seed phrase on a phishing site. Move funds first, then wipe, then report: the order of operations, from Trezor's own guides.
Continue reading: Entered your Trezor seed on a phishing site? Do this first
Reviews Trezor Security Hardware Wallets
Sender checks failed twice: mailing@trezor.io via Brevo, then help@trezor.io auto-replies. The checks that survive, in one table, plus Trezor's own rules.
Continue reading: How to tell if a Trezor email is real, even from @trezor.io
News Trezor Security Hardware Wallets
The STM32 entropy alert is phishing sent through Trezor's breached Brevo account on 9 September. What BitBox and CoinTracking received, and what to do.
Continue reading: Is the Trezor STM32 entropy email real? No, it is phishing
Reviews Hot Wallets Security DeFi
Two browser wallets that are not MetaMask, judged only on the seconds before you sign. One publishes its whole extension under MIT. The other bought the security team it was already using. What each vendor's own documents will and will not support.
Continue reading: Rabby against Phantom: who is reading the transaction before you sign it
Trezor aimed to have its Anonymous Delivery option live in the EU by September 2026. The company's own incident page still lists it as coming soon — and here is the narrow threat it would actually defend against.
Continue reading: Trezor's Anonymous Delivery, and the September date it set itself
News Ledger Security Hardware Wallets
Ledger published LSB 023, 024 and 025 on 27 August. The one with the widest reach sits in the Secure SDK rather than in any single app, and none of the three is repaired by updating device firmware.
Continue reading: Three Ledger bulletins, and the fix is an app update
News Security Hardware Wallets Self-custody
Thousands of hardware wallet buyers had names, home addresses, phone numbers and emails taken in separate breaches at shipping partners, per TechCrunch. No key was touched, and the threat model changed anyway.
Continue reading: Trezor and SafePal data breaches happened at the courier
A peer-reviewed USENIX Security '26 paper reports that over 63% of EIP-7702 authorisation transactions are associated with malicious attacks on the accounts that signed them. What a delegation is, and why signing one is not the same as approving a token.
Continue reading: Most early wallet delegations pointed at attackers
© 2026 Wallet Post. All rights reserved.
Some posts may contain affiliate or sponsored links; see individual posts for disclosures.
Crypto assets are high risk. Nothing on this site is financial advice. Self-custody means self-responsibility.