/wallets · 已驗證 2026-08-14

Trezor

Name: Trezor
Brand: Trezor

硬體錢包 — 開源韌體，透過 Monero GUI 支援 XMR。

維護者: SatoshiLabs (Trezor)

SatoshiLabs (Trezor) 同時營運: Trezor Suite A

⚠ INCIDENT

⚠ 事件 2026-08-13 嚴重度: high

A third-party shipping provider used by Trezor was breached, exposing full names, phone numbers, email addresses, and shipping addresses of customers who ordered in the 90 days prior to 2026-08-08. Trezor's own count: 11,742 customers with full exposure + 1,947 with partial (name + city + email). Affected countries: US, UK, Sweden, Colombia, Brazil, Italy, Portugal. Trezor's public statement leads with 'our devices remain secure' and frames the risk as phishing. The reader-facing reframe is physical: shipping addresses of confirmed crypto holders in the hands of any buyer of the leaked data is home-invasion / stalking / $5-wrench-attack territory, not inbox phishing. Trezor firmware and devices are unaffected by this incident — the exposure is entirely on the fulfillment supply chain. See the curator guide for the operational response.

策展人建議:

事件時間線

2026-08-20auto Trezor published an official 2026-08-13 blog naming ShipMonk as the breached fulfillment partner and restating 11,742 full-address records plus 1,947 partial; devices and firmware remain unaffected. After the first post, Trezor said the 1,947 partial cohort (name/city/email only) may include older-than-90-day orders…

輕度 KYC 硬體 OPEN-SOURCE FW 非託管開源 XMR 原生

前往 Trezor → ⚠ 回報 Markdown 對應版分享 ↗

一覽

等級: B ()
KYC 立場: 輕度 KYC
手續費: Hardware device $69+ · Network fees only
最後驗證: 2026-08-14
營運起始: 2014 · 12y — operating_since estimated from about-page heuristic; WHOIS and archive.org both returned no signal
事件: ⚠ 活躍自 2026-08-13 — /incidents

B 為什麼是 B 級？

Solid pick. Verified working but with a meaningful caveat (UX rough, smaller market, intermediate trust step, partial coverage). Listed because the trade-off is sometimes worth it.

完整細則 + 7 步驗證流程見 /methodology.

策展人裁定 · 核心結論

策展人評鑑結論與資安剖析

核心結論

Trezor 是一個經過驗證且運作正常的 Monero 錢包，日常使用表現良好，但用戶在投入資金前應留意其列出的取捨限制。

✓

已證實優勢

▸ 非託管架構：在整個執行過程中用戶完全掌握自己的私鑰。
▸ 開源代碼庫：公開程式碼庫便於社群獨立審查與安全稽核。
▸ 具備扎實的營運資歷：自 2014 年起持續穩定提供服務（已達 12 年）。

⚠

資安取捨與警示

▸ 未解決資安事件 (2026-08-13)：A third-party shipping provider used by Trezor was breached, exposing full names, phone numbers, email addresses, and shipping addresses of customers who ordered in the 90 days prior to 2026-08-08. Trezor's own count: 11,742 customers with full exposure + 1,947 with partial (name + city + email). Affected countries: US, UK, Sweden, Colombia, Brazil, Italy, Portugal. Trezor's public statement leads with 'our devices remain secure' and frames the risk as phishing. The reader-facing reframe is physical: shipping addresses of confirmed crypto holders in the hands of any buyer of the leaked data is home-invasion / stalking / $5-wrench-attack territory, not inbox phishing. Trezor firmware and devices are unaffected by this incident — the exposure is entirely on the fulfillment supply chain. See the curator guide for the operational response.
▸ 觸發式審查風險：若被自動化風控規則標記，交易或帳號可能會被暫停並要求身分審核。
▸ 僅提供明網服務：缺乏官方 .onion 隱藏服務鏡像，造訪時會暴露網路 IP（除非自行走 VPN/Tor 轉跳）。

評測

Trezor 硬體錢包配合 Monero GUI / Feather 做 XMR 簽署。韌體完全開源、可重現建置 — 這是它與 Ledger 的主要差異點。同樣需寄送地址購買，但操作匿名。

手續費

Hardware device $69+ · Network fees only

連結

WEB https://trezor.io

X @trezor

取自營運方頁面 — 信任時效性指示前，請從多個管道交叉驗證身份。

稽核軌跡 — 編輯主張的收據

● UPSTREAM 正常 · HTTP 200 · 48ms · 檢查於 3h ago
○ ONION 未列出 .onion 鏡像
✎ MANUAL 最後手動驗證 2026-08-14 (<90d)
⌕ LOG 見 Trezor 的策展人日誌

評論 — 已審核 · 規則

尚無社群評論。當第一個。

新增評論

歡迎誠實、中立的回饋。策展人審核後才會顯示。不需 JS。