Unattributed: Credential compromise

Trezor cited July’s Coldcard attacks, in which strong passphrases helped protect some users whose wallet recovery information was compromised.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://cointelegraph.com/news/trezor-wallet-passphrase-limit-128-characters-coldcard-attacks
• https://crypto-economy.com/trezor-raises-passphrase-limit/

Record history

First seen: 2026-11-02T10:46:59.000Z. Last updated: 2026-11-03T14:38:15.284Z. Revision: 4.