Ledger and Trezor urge responsible disclosure of security vulnerabilities as AI threats mount

Two of the biggest names in crypto hardware wallets just demonstrated something vanishingly rare in the tech industry: competitors working together to make each other’s products safer. Ledger’s security research arm, Donjon, discovered a vulnerability in a chip used by Trezor’s Safe 7 wallet, disclosed it responsibly, and both companies are now using the moment to push for industry-wide standards on how security flaws get reported. The backdrop makes their plea more urgent. Both firms are warning that advances in artificial intelligence are compressing the timeline between vulnerability discovery and real-world exploitation, turning what used to be theoretical attacks into practical ones far more quickly. What Ledger actually found In late January 2026, Ledger Donjon identified a laser fault-injection attack on the TROPIC01 chip, a secure element manufactured by Tropic Square and integrated into the Trezor Safe 7 wallet. The technique involves firing precisely targeted laser pulses at the chip to disrupt its operations, a method that sounds like science fiction but is well-established in hardware security research. The vulnerability was publicly disclosed around June 3, 2026, after...