Impact: Destruction of Funds
Scalability: Remote (Interaction)
Severity: High
Fixed in: Firmware 2.3.0
Reported by: Sebastian Kung
Date reported: 2020-02-01

Details

The Monero field unlock_time was not confirmed on the device's display. Since Monero network does not do any sanity checks for this field, this allows a perpetrator to lock user’s funds for a very long time by simply setting it to a very high value.

Fix

trezor/trezor-firmware@7944c1a

Read more

Official blogpost