Ledger, Trezor renew responsible-disclosure push after Liquid Network incident

  • Ledger and Trezor renewed calls for responsible vulnerability disclosure standards.
  • About 4,000 BTC was withdrawn in the Liquid Network incident before developers were notified.
  • The party behind the incident indicated it intends to return most funds after confirming a fix.

Ledger and Trezor have renewed calls for industry-wide responsible-disclosure standards as artificial intelligence lowers the cost of finding and exploiting security flaws. Trezor security chief Jan Komárek criticized the handling of an incident on Liquid Network in which about 4,000 BTC was withdrawn without developers first being notified of the vulnerability. The party behind the incident later indicated it intended to return most of the funds after confirming a fix. The companies’ position extends a disclosure debate already highlighted by Ledger Donjon’s laser fault-injection finding in Trezor’s Safe 7 hardware wallet, which required physical access and specialized equipment and did not expose users to remote or supply-chain risk. Trezor has said the wallet’s layered design continued to protect funds and backups.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.