xmr.club
EN 中文 ES RU
★ FRONT-PAGECDexsport— Web3 crypto sportsbook + casino since 2021, No-KYC, accepts XMR (+38 coins). Read first: documented cancelled-winnings /→
/wallets · 已驗證 2026-09-30

Trezor

B

硬體錢包 — 開源韌體,透過 Monero GUI 支援 XMR。

維護者: SatoshiLabs (Trezor)

SatoshiLabs (Trezor) 同時營運: Trezor Suite A

事件時間線

  1. 2026-08-20auto Trezor published an official 2026-08-13 blog naming ShipMonk as the breached fulfillment partner and restating 11,742 full-address records plus 1,947 partial; devices and firmware remain unaffected. After the first post, Trezor said the 1,947 partial cohort (name/city/email only) may include older-than-90-day orders…
  2. 2026-09-07 Trezor disclosed that ShipMonk had kept records it was required to delete; about 67,000 additional US customers affected, bringing the total to roughly 81,000. Data exposed: names, shipping addresses, emails, phone numbers. Devices and firmware unaffected.
  3. 2026-09-11 Separate breach at Brevo, Trezor's newsletter provider: about 347,000 subscribers received a phishing email titled "Critical Security Alert: STM32 Entropy Vulnerability"; about 2,500 clicked before the malicious site was taken offline roughly 20 minutes after detection.

一覽

等級
B
KYC 立場
輕度 KYC
手續費
Hardware device $69+ · Network fees only
最後驗證
2026-09-30
營運起始
2014 · 12y — operating_since estimated from about-page heuristic; WHOIS and archive.org both returned no signal
事件
⚠ 活躍自 2026-08-13 — /incidents
B 為什麼是 B 級?

Solid pick. Verified working but with a meaningful caveat (UX rough, smaller market, intermediate trust step, partial coverage). Listed because the trade-off is sometimes worth it.

完整細則 + 7 步驗證流程見 /methodology.

策展人裁定 · 核心結論

策展人評鑑結論與資安剖析

核心結論

Trezor 是一個經過驗證且運作正常的 Monero 錢包,日常使用表現良好,但用戶在投入資金前應留意其列出的取捨限制。

✓

已證實優勢

  • ▸ 非託管架構:在整個執行過程中用戶完全掌握自己的私鑰。
  • ▸ 開源代碼庫:公開程式碼庫便於社群獨立審查與安全稽核。
  • ▸ 具備扎實的營運資歷:自 2014 年起持續穩定提供服務(已達 12 年)。
⚠

資安取捨與警示

  • ▸ 未解決資安事件 (2026-08-13):A third-party shipping provider used by Trezor (ShipMonk) was breached, exposing full names, phone numbers, email addresses and shipping addresses. Trezor's first count (2026-08-13) was 11,742 customers with full exposure plus 1,947 partial; on 2026-09-07 it disclosed that ShipMonk had failed to delete older records as required, adding about 67,000 US customers and bringing the total to roughly 81,000. Separately, attackers compromised Brevo, the service Trezor uses for newsletters, and on 2026-09-11 sent about 347,000 Trezor subscribers a fake "Critical Security Alert: STM32 Entropy Vulnerability" email; about 2,500 people clicked before the phishing site was taken down roughly 20 minutes later. Trezor firmware and devices are not affected: both incidents sit in Trezor's vendors, not its hardware. The risk to readers is twofold: convincing phishing that now knows you own a Trezor, and home addresses of confirmed crypto holders circulating, which is a physical-safety problem, not just an inbox one.
  • ▸ 觸發式審查風險:若被自動化風控規則標記,交易或帳號可能會被暫停並要求身分審核。
  • ▸ 僅提供明網服務:缺乏官方 .onion 隱藏服務鏡像,造訪時會暴露網路 IP(除非自行走 VPN/Tor 轉跳)。

評測

Trezor 硬體錢包配合 Monero GUI / Feather 做 XMR 簽署。韌體完全開源、可重現建置 — 這是它與 Ledger 的主要差異點。同樣需寄送地址購買,但操作匿名。

手續費

Hardware device $69+ · Network fees only

連結

取自營運方頁面 — 信任時效性指示前,請從多個管道交叉驗證身份。

稽核軌跡 — 編輯主張的收據

  • ✕ UPSTREAM 離線 · HTTP 200 · 檢查於 6h ago
  • ○ ONION 未列出 .onion 鏡像
  • ✎ MANUAL 最後手動驗證 2026-09-30 (<30d)

評論 — 已審核 · 規則

尚無社群評論。當第一個。

新增評論

歡迎誠實、中立的回饋。策展人審核後才會顯示。不需 JS。

請勿把訂單編號、交易哈希或地址寫進評論內文:內文中類似編號的字串發布時會被隱藏。

必填:評論內容。誠實、具描述性的評論一天內核可。行銷文案、辱罵或攻擊會被退件。每 IP 每日上限 5 筆。