STM32F2 / F4 Fault Injection
The Trezor One is a popular hardware wallet designed to store a user’s cryptocurrency private key. If an attacker is able to extract that private information, they will be able to access the user’s cryptocurrency. The Trezor One features an ST Microelectronics STM32F2-series microcontroller that is known to be vulnerable to glitching.
This work follows our journey as we aim to hack a Trezor One and recover $2 million worth of cryptocurrency.
Documentation:
Coming soon...
Hardware:
Coming soon...
- ChipWhisperer Breakout Board
- MAX4619 Fault Injection Adapter
- Crowbar Glitcher
- Trezor One In-Situ Board
- Trezor Model T In-Situ Board
- STM32F4 CW308 Non-Socket Board
- STM32F4 CW308 Socket Board
Videos:
Early Work:
- Article: Cracking a $2 million crypto wallet (The Verge)
- Article: I had $2 million dollars in crypto locked on a wallet (Dan Reich)
- Slides: That time I hacked a hardware wallet… (Revised March 27, 2022)
- Source Code (Python w/ Jupyter Notebook + OpenOCD) (Revised January 13, 2022)