Trezor device compromised?

[OmegaStarScream]

This is a wallet I have owned for multiple years. Barely used it except last week (had an issue with it which I already made a topic about, but nothing major).

Today, I replugged the device again... ran Trezor suite and now getting this on the dashboard menu:



I didn't input the PIN even though I was prompted to.

I had an update for the Trezor suite (26.5.2) so I did it, and there was also a firmware update that I did (I had it last week, but I decided to proceed without it).

I did the update because of this: https://trezor.io/support/troubleshooting/device-issues/trezor-fw-authenticity-check-failed?utm_medium=desktop#open-chat

But as you can see the error is not the same. Mine says "Your Trezor's model or color appears to have been manipulated."

[Lucius]

I am not a long time user of this HW so I have never seen this message. I have a T5 model and as far as I can see I'm still on version 26.5.1, although I'm being offered an upgrade, which I won't do for now because it's possible that something is wrong with that version and it's giving a fake alert, or hackers have managed to break into the upgrade system and compromise the upgrade.

I checked Trezor R and only one user complained that the 26.5.2 version was causing him problems, but nothing like yours.

I don't know how else you'll find out what's really going on except to contact support and hope you'll find a real person and not an AI bot.

[n0nce]

Looks like a bug to me; according to this support page, it's a feature only available for newer models (Trezor Safe 3, Trezor Safe 5), due to their new Secure Element chip, which your Trezor One doesn't have.

If your Trezor Safe device fails the authentication check, Suite will display the same Your device may have been compromised warning

This support page also only mentions the 'Safe' devices:

Trezor Safe device authentication check

The Trezor Safe 3 and Safe 5 each include a Secure Element chip that help protect your wallet and verify your device's authenticity.
The Trezor Safe 7 builds on this design with two Secure Elements working together to provide even stronger protection against tampering and physical attacks.

[dkbit98]

Firmware update would probably fix this issue.
Similar messages are showing up when people are making their own DIY Trezor devices and connecting them to Trezor Suite.
I would check what is your latest firmware, you can do this in Trezor Suite settings, and there is even option to disable authentication checks if you want.
You can also use Trezor with Electrum or Sparrow wallet, if you don't want to mess around with latest Trezor shenanigans.

[OmegaStarScream]

I appreciate everyone's reponse.

I talked to the support and after I told them the device was bought a long time ago and it's definitely legitimate and was not physically compromised, they told me to ignore the message (which is now gone somehow).

[Lucius]

@OmegaStarScream, have you found out why such a message appeared at all, considering that your device is not compromised? Experienced people probably won't panic when they see something like that, but there are certainly people who could have a strong panic attack in case of such a message, especially if the device stores private keys of great value.

[OmegaStarScream]

@OmegaStarScream, have you found out why such a message appeared at all, considering that your device is not compromised? Experienced people probably won't panic when they see something like that, but there are certainly people who could have a strong panic attack in case of such a message, especially if the device stores private keys of great value.

I still have no clue to be honest. I was missing both a software and firmware updates as mentioned in the OP, but even after doing them, the error didn't go away, not right away anyway.

For the panicking part, I think it would be grealy useful if Trezor update the topic I linked with all possible errors and what causes them.