Trezor Expands Wallet Security Features Following $100M Coldcard Exploit
Summary
Trezor raised the maximum wallet passphrase length from 50 to 128 characters through updated Trezor Suite software and compatible firmware. The change follows a July Coldcard firmware vulnerability that reportedly led to more than $100 million in losses by weakening recovery-phrase randomness. Strong, unique passphrases protected some affected users. Trezor says wallets generated on its devices were not affected, but funds restored from vulnerable Coldcard backups remain at risk until moved to a newly generated wallet. Passphrases create separate wallets and cannot be recovered if lost, so users must store and reproduce them carefully.
