Hacker in the US hacked into Trezor wallet to help user
A hacker recovered $2 million in cryptocurrency to a wallet’s owner who forgot the password
27.01.2022 - 09:15
574
1 min
0
What’s new? Joe Grand, known under the pseudonym Kingpin, has posted a video on YouTube in which he explained how he hacked into the Trezor One crypto wallet. The hacker broke into the wallet at the request of investors who had forgotten the password from him back in 2018. The accumulated investments amounted to about $2 million in cryptocurrency.
How did the hacker manage to hack the wallet? It took Grand 12 weeks to recover the lost PIN. During a firmware update, the Trezor One wallets temporarily move the code and key to RAM and then back to flash memory. Grand found that in the version of the firmware installed on the investors’ wallet, this information was not moved, but copied to RAM. This meant that if the hack failed and the RAM was erased, the PIN and key information would still be stored in the flash memory.
After using a fault injection attack, Grand still got the cherished numbers. After the hacker’s video of the hack was released, Trezor reported it was working on a fix for this vulnerability.
Useful material?
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Telegram
Twitter