The hidden risk of updatable firmware

From Cointelegraph
April 24, 2025 11:00 AM:

Hardware wallets are seen as the ultimate protection in crypto, but firmware updates can be a double-edged sword. Each update presents an opportunity for hackers to exploit vulnerabilities, potentially leading to drained funds or compromised private keys. Ledger and OneKey have already faced major security breaches due to firmware vulnerabilities.

Not all firmware updates are disasters, as some companies have taken steps to enhance security. Ledger now uses secure element chips, Trezor allows community scrutiny, and Tangem ships with non-updatable firmware. However, the risk of introducing fatal flaws through updates remains, highlighting the need for more secure models in the crypto space.

With the crypto market booming at $2.79 trillion, security is paramount. Users shouldn’t have to gamble with their private keys or trust corporations blindly with updates. Security should prioritize user control, transparency, and verifiable developer backgrounds to ensure the safety of hardware wallets. Trust in security should be based on facts, not assumptions.

Read more at Cointelegraph: The hidden risk of updatable firmware