⚡ Voltage Glitching Extracts a Trezor Seed

On 31 January 2020, Kraken Security Labs disclosed a voltage-glitching attack against the Trezor One and Model T: a timed voltage spike during boot extracts the encrypted seed with "just 15 minutes of physical access to the device." Trezor was notified privately on 30 October 2019; the flaw lives in the microcontroller, unfixable by firmware alone.