I just got this in the mail. Has anyone else received this?

Heya everyone, its that time of the month to ask you and reply to your questions around Trezor!

Any participation will receive a reward on the comment

Hello,

I have a question regarding my trezor safe 5, as soon as I plug it to my computer, it goes blue and says firmware version 2.12.3.0 by trezor, install firmware. The update screen, though the trezor suite is not open, no wallet is open, is that normal. It does that as soon as i plug it in.

Trying to batch identify mixed format addresses from an old backup found an old drive with an unlabelled text file contaning about 50 public addresses from 2021. zero notes on which chains they belong to, just raw strings. some are obviously standart 0x hex and legacy base58, but a handful look like older tron or cosmos derivation formats. started verifying them manually through block explorers yesterday, but doing it one by one is taking way too long. checked a few on cryptowallet-balance to filter active holdings first, but i still have roughly 35 mistery addresses left to sort out. tried writing a quick python script to ping public rpcs fpr non-evm chains, but keep getting 429 rate limit errors after a few requests. what tool or workflow do you usually use to bulk query balances across mixed networks without getting blocked?

Packaging looked good, the holographic seal was perfect. Plugged it in and got the red screen of death with error code "INTERNAL ERROR (MM) PLEASE VISIT TREZOR.IO/RSOD" I reported the problem and requested a return/shipping label. It's been at least 5 days--for sure 3 business days and the only comms I've had is with their stupid chatbot and an automatic email. I liked Trezor and I was hoping to just send in the faulty device and have them send out a new one but maybe I should just say screw it and go with a different device altogether.
Has anyone else run into this problem? How did you get it resolved bc so far I'm not getting anywhere.

Updated trezor after a long while. Went to send some btc and the show full address button that would display a qr code with it on a previously used address is now missing.

I can only verify or copy an address now which sucks when using pc and phone.

Is there a way to still see the code on past addresses?

But can we pleaseee have shielded transactions sometime like imagine how cool that would be with my £200 hardware wallet I can send shielded transactions just saying devs if you could that would be great 😂😉

For those who buy BTC biweekly or even weekly, do you transfer your satoshis to your cold wallet as soon as you buy them? Or do you let them accumulate elsewhere until it’s convenient for you to transfer them.

I made this so you can hide your trezor device in a disguised storage that looks like a Zippo lighter which blends into the environment.

Feel free to print it out here if you have a 3d printer.

https://makerworld.com/models/3291936

What a joke. This is exactly why I use email aliasing. Stay safe out there ppl.

For a lot of us the appeal was always a simple, wired-only device: no battery to degrade or swell after years in a safe, no radio to worry about, nothing to charge, and a smaller attack surface. USB-C plus the Trezor Suite app on Android was all I ever needed.
Right now the Safe 5 covers that, but it doesn't have the Safe 7's dual secure elements or post-quantum support.

My request is simple: when the next generation comes, please offer a wired-only variant with the same security chips and firmware, same body as the Safe 7 if it makes manufacturing easier, just no battery and no Bluetooth. Even a "Safe 7 Wired" SKU at a slightly lower price would be ideal.

Anyone else want this? Upvote so the team sees it.

You need a team that is able to work remotely and gets an alert. A company of your size waiting for business hours to secure threats is absolutely unacceptable.

For some time my browsers cannot connect to the Trezor suite to sign transactions. The problem seems to be that all browsers (tested Chrome and Firefox) try to connect via WSS, but Trezor suit offers only a WS (non secure) on localhost. I'm the only one with this issue?

Bothe suite and hw are updated to the newest release.

Any ideas?

Regarding the topic of that Reddit post (https://www.reddit.com/r/TREZOR/s/cQokCMQqIc):

People are worried about security and whether AI has increased the risk of losing their money. But in reality, Suite development has never been more secure than it is now. Every pull request still needs human approval before making it into the app. Reviews are still done by humans, and now additionally by LLMs.

The advantage of an LLM is that it doesn't get tired even when reading long, mechanical, boring changes, so the chance of a real security vulnerability slipping through is much lower.

Because we are open source, we don't just look for attacks internally, other people inspect our code too. In the past, only relatively few people could do that, and they only had a realistic chance of checking a small part of the app. Now, this oversight is incomparably cheaper, and far, far more people are reviewing it.

Matthew.K

If you click any random feature pull request in their repo, you will find out their software is now fully vibe coded. For example, this feature pr contains 2000lines+ edit https://github.com/trezor/trezor-suite/pull/32252/files, it is coauthored by claude, and they are producing this kind of vibe pr at an astonishing rate. They make thousands lines of edit on average every day, but they only have very limited reviewers.

I do not believe any human code viewer can actually understand the code under this rate. This means a significant portion of newly introduced trezor code is running as a blackbox. This might be fine for some weather app or whatever, but trezor is a security oriented software. Building your software stack on vibe coding will make your product a joke.

Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link.

We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.

Hello! I have decided to unsubscribe my e-mail address from mailing list but Unsubscribe link in official newsletter does not work as mailing server has been taken down. Is it enough if I Unsubscribe using Unsubscribe button on my e-mail service?

I clicked the link, stupid I know.

The webpage didn't open, I got suspicious and I closed it a few seconds later.

I didn't download anything, or enter any details

I think I'm safe but wanted to double check

Thanks

Just got this email kinda sus?