A recent report from Swiss blockchain analytics firm Global Ledger revealed that the sanctioned Russian crypto exchange Garantex has resurfaced under the name Grinex.
“After the Garantex website was taken down and its wallets were frozen, the sanctioned exchange provides access to crypto services through an alternative platform, Grinex,” said Global Ledger.
By mid-March, Grinex had already received over $29 million.
Compliance alert: #Garantex founders launch a new platform
1/ Following Garantex’s shutdown and #Tether freezing its wallets, the founders have launched Grinex. Here’s what we’ve uncovered pic.twitter.com/m28einnisn
Garantex has been implicated in laundering over $96 billion in illicit funds. The firm faced coordinated enforcement actions from the US and the European Union (EU). In fact, just last week, Indian authorities arrested the founder of Garantex, Aleksej Besciokov, in the South Indian state of Kerala.
On America’s request, Besciokov has been arrested for facilitating money laundering by transnational criminal organizations, including terrorist organizations, and sanctions violations.
Garantex And Grinex Are Directly Connected, Both On-Chain And Off-Chain
The Swiss analytics firm said that it can confidently conclude that Grinex and Garantex are directly connected both on-chain and off-chain.
Grinex has reportedly inherited much of Garantex’s user base and financial operations.
Swiss blockchain analytics firms have uncovered that over $60 million worth of ruble-backed stablecoins (A7A5) were laundered and funneled into Grinex during its transition.
“The movement of funds, including the systematic transfer of A7A5 liquidity, the use of one-time-use wallets, and the involvement of addresses previously associated with Garantex, provides clear on-chain proof of their link,” Global Ledger said. “Additionally, off-chain indicators, such as transactional patterns, commentaries and exchange behaviours, further reinforce this connection.”
Advanced crypto laundering techniques—such as burning and minting mechanisms—were employed to make new stablecoins appear “clean,” allowing the platform to evade detection.
Garantex has been on the radar of international regulatory authorities for some time. The exchange was blacklisted by the US Treasury’s Office of Foreign Assets Control (OFAC) in April 2022.
In recent enforcement actions, authorities froze $28 million in assets tied to Garantex and seized its domains.
Stablecoin issuer Tether also stepped in to freeze $27 million worth of funds, disrupting withdrawal services for users.
Despite these efforts, Garantex managed to rebrand itself as Grinex, transferring liquidity and customer funds to the new platform.
The good news? They all mean the same thing! But for new users, this terminology can be confusing when securing their assets.
At Trezor, we previously used the term “recovery seed.” However, after seeing firsthand how it caused confusion, we decided to simplify it.
Because honestly, how many new people can understand what a “seed phrase” is? It’s not intuitive, especially when the device we use to secure your crypto is called a hardware wallet. It’s easy to get lost in jargon, which only delays taking control of your crypto!
It’s exactly what it sounds like. If you lose your device and need to recover your wallet, use your wallet backup.
Our wallet backup can look like this:
Or this:
Even this:
(We’ll explain this below!)
Think of your wallet backup as the key or master password to your crypto wallet.
If your Trezor hardware wallet is damaged, you’ll need this wallet backup to recover your funds. Without it, you cannot access, transfer, or manage your funds.
It should be kept in a safe place because without it, you could be permanently locked out of your crypto.
When setting up a new wallet, you’ll be asked to write down a list of 12, 20, or 24-word words.
This list of words, generated by your hardware wallet, is your wallet backup. It represents a private key that grants access to your wallet, which holds your assets securely on the blockchain.
“But what about that crazy list of numbers above? Is that also my wallet backup?”
Here’s a fun fact… your wallet backup doesn’t actually start as a list of words!
It originates as a long, random string of mathematically derived characters, which is then converted into words to make it human-readable… crazy, huh?
Another fun fact:Trezor’s founders pioneered this approach!
Once we found a way to translate private key data into simple words, it became the industry standard.
(Just another reason to choose Trezor… humble brag 😉)
After nearly four years of battle, the U.S. SEC ended its legal fight with Ripple, sparking a significant XRP rally. According to Coingecko, XRP is up nearly 7% in the past 24 hours, pushing weekly gains above 15%.
The rally was anticipated. By dismissing the case and not appealing, the SEC has lifted a massive burden from XRP and Ripple, which had been contending with the strict regulator.
This is it – the moment we’ve been waiting for. The SEC will drop its appeal – a resounding victory for Ripple, for crypto, every way you look at it.
In its December 2020 lawsuit, the U.S. SEC alleged that Ripple, the for-profit company using XRP in some solutions, illegally raised $1.3 billion via an ICO by selling unregistered securities in XRP. Ripple denied these claims and has battled the determined regulator for four years.
With the case concluded, it marks a pivotal moment not only for Ripple but also for the broader crypto market. Had the SEC won, it would have set a precedent for classifying digital assets—especially those launched by U.S. founders—as securities.
Under the Biden administration, the SEC sought to regulate cryptos as securities rather than commodities. This approach would subject most tokens, including some of the best cryptos to buy, to stricter financial regulations, akin to stocks and ETFs.
The SEC even failed to clarify whether Ethereum was a commodity or an unregistered security, despite approving a spot Ethereum ETF in July 2024. With no clarity, ETH has been struggling for momentum, underperforming some of the hottest crypto presales to buy in 2025.
However, under the new Trump administration, regulatory policies are shifting rapidly. Alongside David Sacks, the new crypto and AI czar, the U.S. aims to create a favorable environment that encourages crypto development. Sacks has been buying Bitcoin since 2012 saying it would be the “preferred form of currency over time.”
Trump’s crypto czar, David Sacks, reveals he’s been buying #Bitcoin since 2012.
Says Bitcoin is “money backed by math” and could become the preferred form of currency over time. pic.twitter.com/lyRurUeu30
Following through on his campaign pledges, Trump has adopted a pro-crypto stance. Over the past three months, since Gary Gensler’s resignation, the SEC has withdrawn lawsuits against several crypto firms and exchanges, including Robinhood and Coinbase.
The withdrawal of the case against Ripple is another win for the industry, signaling a trend where crypto firms find relief and can now focus on growth rather than funneling money to lawyers.
In a post on X, Brad Garlinghouse, Ripple’s CEO, expressed relief, stating, “The case has ended—it’s over.”
Bitnomial, a crypto exchange, is launching the first-ever CFTC-regulated XRP futures in the U.S. This physically settled product begins trading today, March 20.
XRP futures are here!
Bitnomial is launching the first-ever CFTC-regulated $XRP futures in the U.S. — physically settled for real market impact. Plus, we’ve voluntarily dismissed our case against the SEC as regulatory clarity improves. pic.twitter.com/ARkSanjFNU
Multiple spot ETF applications are also awaiting approval. Punters on Polymarket give an 83% chance that the first spot XRP ETF will go live in H2 2025.
JUST IN: Polymarket users predict an 83% chance that an XRP ETF will be approved in 2025.
On the daily chart, XRP remains in an uptrend. However, prices are stuck in consolidation, moving sideways after hitting $3.4 in January 2025.
The coin has found strong support at $2, and as long as traders and institutions accumulate, buyers might gain the strength to push higher—potentially to new all-time highs.
According to Santiment, the number of whales holding at least 1 million XRP—controlling over $114 billion worth of the coin—has risen 6.5% in two months. Meanwhile, XRP appears to be decoupling from the “altcoin pack.”
XRP has decoupled from the altcoin pack, surging another +14% and breaching the $2.50 resistance for the first time in 12 days. Wallets with at least 1M $XRP now hold 46.4B coins, as they have accumulated 6.5% more in just the past 2 months alone. Address activity has also… pic.twitter.com/87PiB2OxeU
Accompanying this uptick is a surge in on-chain activity: new wallet interactions on the XRP Ledger jumped 600% in March compared to previous months, pointing to growing interest.
Ripple-SEC Case is Over, Will XRP Spark An Altcoin Rally?
SEC Case Dropped: Lawsuit alleging Ripple’s $1.3 billion XRP ICO as unregistered securities ends
Pro-Crypto Shift: Trump’s administration and new crypto czar David Sacks ease regulations, withdrawing SEC suits against firms like Coinbase
XRP Momentum: Whales up 6.5%, on-chain activity surges 600%, with XRP eyeing $3.4 and ETF hopes for H2 2025
More than 150 projects are now building on Avalanche under the Retro9000 program ahead of a key snapshot event scheduled for April 2025. Some of them include The Arena, which is building a next-gen SocialFi app; Animalia–a free-to-play online NFT trading card game; and L1Beat–which will provide Avalanche L1 analytics.
This development is a massive boost for AVAX and the entire Avalanche ecosystem, arriving as crypto prices across the board gain traction after steady losses through much of Q1 2025.
The update shows developers are eager to build on the DeFi-centric chain, a trend that could drive demand for AVAX and encourage buyers to align with the primary uptrend set in motion in late 2024.
It comes at a critical time for Avalanche.
Since launching in 2020, it has struggled for adoption amid the tough competition from other scalable Ethereum layer-2s like Arbitrum and modern chains like Solana and Algorand–which posted explosive gains in 2024 and likely to extend them in 2025.
In the face of falling interest in DeFi, intense competition, and the rise of competitors, Avalanche developers released Retro9000 program as part of Avalanche9000 to reclaim their edge as a scalable and low-latency alternative to Ethereum and other alternatives.
Under Retro9000, Avalanche offers $40 million in total funding to encourage developers to create Layer-1 blockchains using its technology. This grant is part of the Avalanche9000 upgrade, which went live in December 2024.
The Retro9000 testnet phase is ongoing, and developers must submit their best creations before the first snapshot on April 15, 2025, at 12:00 UTC.
Retro9000: Up to $40m in retroactive grants for Avalanche L1s
This new grant program aims to reward developers who contribute to the testnet and launch their project on mainnet, empowering developers to do what they do best–innovate and build.
Avalanche9000 introduced features to foster ecosystem growth, enhance scalability, and improve efficiency, particularly in cost and performance.
For example, the cost of launching Layer-1 chains—formerly subnets—has been reduced by 99%. Projects no longer need to stake 2,000 AVAX; instead, they pay a monthly fee of 1.33 AVAX per validator. Additionally, C-Chain fees dropped by 96%.
Avalanche9000 just went live on the Fuji Testnet, and it’s a game-changer for builders.
Here’s what you need to know: • Launching your own Avalanche L1 is now 99.9% cheaper • C-Chain fees are down by 96% • Interchain messaging (ICM) makes L1s actually work together
Developers now have greater flexibility when configuring their Layer-1s, able to launch unique gas tokens, define staking parameters, and set governance structures.
The introduction of ACP-77 with the upgrade enables permissionless validation, allowing Layer-1s to operate independently of Avalanche’s core chains, thus reducing hardware and computational costs.
Unlike the focus by Solana on enhancing only their mainnet, Avalanche9000’s multi-L1 approach offers modularity that could outshine in a fragmented Web3 future.
Time for Avalanche to Shine?
The Retro9000 program and the Avalanche9000 upgrade are likely to drive mainnet demand, potentially lifting AVAX prices.
By the end of the year, developers at Ava Labs, the team behind Avalanche, expect hundreds of layer-1s to launch.
Wait… did he just say hundreds of L1s launching on Avalanche next year?@MattSchmenk shared how Avalanche9000, ICTT, and Avalanche Interchain Messaging are setting the stage for a surge of new L1s in 2025 at a recent @Token_Relations webinar.
If it happens and the filing is approved, this ETF would allow institutions to gain direct exposure to AVAX without managing private keys or navigating crypto exchanges.
VanEck will also use a regulated custodian like Coinbase Prime—already utilized by spot Bitcoin and Ethereum ETF issuers such as BlackRock—for private key management and security.
Confidence is high for this reason. If AVAX finds support at $15, prices could recover, potentially breaking above $30 in the coming sessions, making it undoubtedly one of the best cryptos investors can choose to buy in 2025.
Retro9000 Grant Program Attracting Developers, Time For Avalanche (AVAX) To Shine?
Over 150 projects building on Avalanche under the Retro9000 grant program
Avalanche recently activated Avalanche9000. Hundreds of layer-1s expected to build onchain
With VanEck registering an Avalanche ETF in Delaware, analysts are bullish. Will AVAX break $30?
Bitcoin transaction fees are measured in satoshis per virtual byte (sat/vB) — higher sat/vB means faster confirmation.
What does sat/vB mean?
sat/vB = satoshis per virtual byte (the fee rate for your transaction).
Fees depend on transaction size, not the amount of Bitcoin sent.
The higher the fee rate (sat/vB), the more likely miners will prioritize your transaction.
How long do Bitcoin transactions take to confirm?
Bitcoin transactions are typically confirmed within 10–60 minutes, but it depends on the fee rate, network congestion, and transaction size. High-fee transactions confirm faster, while low-fee ones may take several hours or even days if the network is busy. You can speed up confirmation using RBF or CPFP if needed.
How long should I wait before taking action?
If your transaction is unconfirmed for a few hours and fees remain high, consider using RBF or CPFP.
If the network is less busy, waiting 12–24 hours may be enough.
Can I cancel a Bitcoin transaction?
No, Bitcoin transactions cannot be canceled once they are broadcast to the network. However, if your transaction is marked as “replaceable” (RBF-enabled), you can replace it with a higher-fee transaction or send it to a different address. This effectively overrides the original transaction.
What is Replace-by-Fee (RBF)?
RBF lets you replace an unconfirmed transaction with a higher-fee version to speed up confirmation.
Only works if RBF was enabled when the transaction was sent.
Trezor Suite enables RBF by default.
What is Child Pays for Parent (CPFP)?
CPFP lets you spend an unconfirmed transaction with a higher fee, so miners will confirm both at the same time.
Use CPFP if you received Bitcoin with a low fee and want to speed it up.
If you sent Bitcoin but can’t use RBF, CPFP may work if you have an unconfirmed change output available.
What is a mempool, and what is mempool.space?
A mempool (short for “memory pool”) is a temporary holding area where unconfirmed Bitcoin transactions wait before being added to a block. Each Bitcoin node has its own mempool, and miners select transactions from it based on fee priority — higher-fee transactions get confirmed first.
mempool.space is a block explorer that lets you view the Bitcoin network’s mempool in real time, including current fee estimates and transaction status. It’s a useful tool for checking whether your transaction will likely be confirmed soon.
Other Bitcoin block explorers include:
Tip: If you want to track a specific transaction, find the TXID in Trezor Suite and paste it into a block explorer like mempool.space or Trezor’s explorer.
What is Mempool Accelerator™?
Mempool Accelerator™ is a third-party service that lets you pay miners directly to confirm your transaction faster.
Works even if you’re not the sender or receiver of the transaction.
Useful when RBF or CPFP isn’t an option.
Always check the service’s terms and fees before using it.
Australian crypto investors are currently facing significant financial losses due to the rise in cryptocurrency scams, particularly those impersonating Binance, one of the world’s largest crypto exchanges. In a statement given on 20 March 2025, the Australian Federal Police (AFP) confirmed the commencement of a global investigation into these crypto scams.
Scammers posing as Binance representatives initiate contact through SMS with the aggrieved party. They then proceed to create a sense of urgency in their message, alleging unauthorized access to the victim’s accounts.
The SMS sent by the scammers to the victims often include fake verification codes along with a support phone number. When the aggrieved party calls the phone number included in the SMS, the system directs them to transfer their assets to a “trust wallet” for security reasons. The scammers control this trust wallet, resulting in the victims losing their funds.
What is striking in this case, however, is the manipulation of SMS technology by the scammers. They spoof their messages to appear in the legitimate message thread from Binance, making it difficult for recipients to distinguish between genuine and fraudulent communications.
The @AusFedPolice (AFP) and @binance are working together to combat a surge in impersonation scams targeting Australian crypto users as part of Operation Firestorm.
How These Scams Work: Scammers pose as Binance representatives via SMS and messaging apps They claim an…
AFP Commander, Cybercrime Operations, Graeme Marshall said, “The AFP has worked closely with our partners at the NASC to ensure any victims in Australia targeted by these scammers were identified swiftly and given advice to help protect their cryptocurrency accounts.”
Australian Authorities Launch Operation Firestorm in Collaboration With the NASC and Other International Law Agencies
In response to the growing scams, the Australian authorities have launched Operation Firestorm, a collaborative effort by the AFP, the National Anti-Scam Centre (NASC), and other international law enforcement agencies.
Operation Firestorm aims to find and dismantle the organizations that are carrying out these scams, and so far, authorities have identified and alerted 130 Australian victims.
Highlighting the challenges of recovering the stolen funds, Commander Marshall emphasizes that once the funds are transferred to the trust wallet, the funds are quickly moved around through a network of wallets and money laundering accounts that complicate fund recovery efforts.
Marshall further iterates, “If you have already transferred your cryptocurrency to a so-called trust wallet, report it to your bank or digital currency exchange immediately, then to police via ReportCyber quoting the reference number AFP-068.”
In light of the recent scams, the Australian government has initiated the implementation of regulatory measures for investor protection. One of the regulatory measures is to mandate telecommunication companies to block or flag texts from unregistered senders.
The government seeks to empower the Australian Communications and Media Authority (ACMA) by creating a mandatory SMS sender ID register so that the media authority can either block these messages or mark them with a warning.
These measures are undertaken to protect Australian investors from scammers impersonating reputable sources, including crypto exchanges.
Binance, on its part, has expressed its commitment to security and user education.
Jimmy Su, Binance’s Chief Security Officer said, “Scammers often impersonate trusted platforms – like Binance and others – by exploiting certain telecom loopholes to manipulate sender names and sender phone numbers to create urgency.”
Furthermore, to safeguard investors against such scams, Su suggested the adoption of some preventive measures. He suggested verifying communications by only using the company website or app.
Su iterated to not share sensitive information and that legitimate companies would never ask for an investor’s seed phrase or private keys.
He asked investors to be wary of urgent requests, especially those concerning fund transfers, and only use official tools provided by exchanges like Binance Verify to confirm the legitimacy of the communication.
Binance has plans of its own on how to deal with this menace. The company is aiming to launch a new security feature that will help users identify phishing scams.
Solana Labs CEO Anatoly Yakovenko has broken his silence over the controversial “America Is Back — Time to Accelerate” Solana ad.
The advert received huge backlash because it contained political messaging regarding gender identity. Yakovenko took to X late yesterday (March 19), saying, “The ad was bad, and it’s still gnawing at my soul.”
The ad was bad, and it’s still gnawing at my soul. I am ashamed I downplayed it instead of just calling it what it is – mean and punching down on a marginalized group. I am grateful for the ecosystem devs and artists that immediately called it what it is both publicly and…
Controversial Solana Ad Stayed Up For Nine Hours And Amassed Over 1.2 Million Views
Yakovenko praised those in the Solana ecosystem who called out the “mess” that was posted on Solana’s X account. The post accumulated around 1.2 million views and 1,300 comments before it was deleted roughly nine hours later.
The CEO of Solana Labs said he will use the learning experience to ensure Solana stays focused on open-source software development and decentralization while staying firmly “out of cultural wars.”
Solana hasn’t made an official comment on the matter, though its X account reshared Yakovenko’s post to its 3.3 million followers. However, the report of Anatoly’s statement likely means that the Solana Foundation agrees with his message.
The now-deleted two-minute ad for the Solana Accelerate conference showed a man acting as America in a therapy session who said he was thinking “about innovation” such as crypto.
In response, the therapist then responded that he should instead do “something more productive, like coming up with a new gender”, going on to say the man should “focus on pronouns.”
The man snapped back, stating he wanted “to invent technologies, not genders.” The controversial Solana ad came nine days after Solana’s X account posted: “Solana is for everyone.”
Judging by the backlash to the ad and the “Solana is for everyone” post, it has come as a slight surprise due to the crypto community being seen as holding more traditionalist views and not caring for the left-wings obsession over gender ideology.
SOL Still In The Green Even With The Advertisement Backlash
–
Price
Market Cap
–
–
–
The whole crypto market has bounced positively on the back of this weeks FOMC meeting where it was stated there will be no change to current BPS rates. However, many expected SOL to crash following the backlash of the now-deleted ad.
This hasn’t been the case and SOL is up around 2.5% over the past 24 hours. It is holding steady at around $130 and looks primed to push on to its next resistance level of $150.
Its bullish momentum is being helped along by the news of a Solana ETF launching today (March 20). While not a spot ETF, Florida-based Volatility Shares LLC is launching funds to track SOL futures.
The Volatility Shares Solana ETF (ticker SOLZ) will track Solana futures, while the Volatility Shares 2X Solana ETF (SOLT) will offer twice the leveraged exposure.
Volatility Shares LLC is a start-up ETF firm, and its CEO Justin Young said, “Our launch comes at a time of renewed optimism for cryptocurrency innovation in the US. We believe the Trump administration recognizes the strategic importance of maintaining American leadership in financial technology.”
At Trezor, we pioneered the first-ever hardware wallet in 2013 with a clear goal: to provide a secure and easy-to-use tool for managing Bitcoin and crypto. Hardware wallets are designed to keep private keys offline, protecting them from remote attacks — a task our earlier models have always excelled at.
While hardware wallets offer strong security, no system is entirely immune to physical attacks. Given enough time, expertise, and resources, a determined attacker could theoretically attempt to extract private keys from a stolen device. To mitigate this risk, we introduced the passphrase — a user-defined, extra layer of security for your wallet backup. Unlike the wallet backup, the passphrase is never stored on the device, making it impossible to extract even in the event of a physical attack.
One of the biggest differences between Trezor Safe Family (introduced with the launch of the Trezor Safe 3 in 2023) was the introduction of a dedicated Secure Element. It was introduced as a response to user feedback for enhanced protection in case of device theft or loss. The Secure Element used in the Trezor Safe 5 and Trezor Safe 3 is the OPTIGA™ Trust M (V3). In effect, it is a chip designed to protect highly sensitive information from software and hardware attacks.
While all Trezor models remain secure against remote attacks, the Secure Element in the Trezor Safe 3 & Trezor Safe 5 adds an extra layer of physical security — for example, in case a Trezor device is lost or stolen.
The Secure Element in Trezor Safe 3 & Trezor Safe 5 provides safeguards in:
Prevents seed extraction by fault injection attacks (voltage glitching): A previously known issue with Trezor Model One and Trezor Model T.
Device authenticity verification: Strengthening resistance against supply chain attacks.
A supply chain attack happens when a device is tampered with before it reaches the customer. This could involve an attacker modifying a legitimate device and reselling it.
To combat supply chain risks, Trezor has implemented multiple defense layers:
Firmware security checks a. Firmware revision ID check b. Firmware hash check
Onboarding protection a. Preinstalled firmware detection b. Entropy check workflow c. Firmware upgrade d. Device authentication check
Firmware security checks a. Firmware revision ID check
Trezor Suite includes multiple layers of verification to detect potential tampering. These include:
a. Firmware revision ID check
Firmware revision is a unique identifier assigned to each firmware release. Every time a Trezor device is connected, Trezor Suite verifies the firmware revision against a database of official releases. Here’s how it works:
If the firmware revision does not match, Trezor Suite flags the device as counterfeit.
This check is particularly effective against supply chain attacks requiring a long preparation time. This is on account of the time taken to modify and distribute tampered devices.
Since Trezor regularly releases new firmware updates and Trezor Suite prompts users to update their firmware before setup, a device running unauthorized firmware is likely to fail this check.
Important: As a practice, we always recommend updating your device’s firmware regularly. This is necessary to expand the functionality of your Trezor, apply new security measures, and enable newly developed features.
Here’s more on this:
b. Firmware hash check
The firmware hash check is a cryptographic verification process that ensures the integrity of the firmware running on your Trezor device. This is how it works:
Upon every device connection, Trezor Suite issues a random cryptographic challenge to the device.
The device then calculates a firmware hash, which is compared against the expected hash from the official firmware binary file stored in Trezor Suite.
If the results do not match, Trezor Suite flags the device as counterfeit.
Please note, that this check is only effective if the device is running the latest firmware version. This is why Trezor Suite strongly encourages users to update the firmware regularly.
Here’s more on this:
All Trezor devices undergo additional security checks during initial setup:
a. Preinstalled firmware detection
If a device is detected with preinstalled firmware, the user is prompted to confirm whether they’ve used the device before.
If it’s a case that they have not used the device previously, the device may be compromised, and users are warned accordingly.
b. Entropy check workflow
During wallet creation, Trezor generates a wallet using random data (entropy) from two sources,
Trezor device: The internal source.
A companion app: Typically Trezor Suite, but it can also be another compatible app like trezorctl or Electrum.
Fake or compromised devices typically ignore the input from the external entropy source (Trezor Suite), generating wallets in a predictable, deterministic way, allowing attackers to recreate and access them.
The entropy check protects the user from this behavior and marks the device as counterfeit if it does not pass the check.
Here’s more on this:
c. Firmware upgrade
During onboarding, users are encouraged to upgrade to the latest firmware version, triggering both revision ID and hash checks, as explained earlier in the article.
While users have the option to opt out, we recommend not doing so in light of the security risks around using outdated firmware.
d. Device authentication check
In the case of the Trezor Safe 3 and Trezor Safe 5, the Secure Element plays an important role in verifying the authenticity of your device.
When setting up the device:
Trezor Suite sends a challenge to the device.
The Secure Element signs the challenge and returns it with a unique device certificate.
Trezor Suite verifies both signatures to confirm authenticity.
The certificate is only checked locally and immediately discarded, ensuring privacy. Users may opt out of the device authentication process, but we strongly advise against it.
Learn more here:
a. Tamper-evident packaging
Every Trezor Safe 3 comes with a holographic seal over the connector, ensuring the device hasn’t been interfered with before reaching the customer. Please note, the Trezor Safe 3 packaging does not have a seal.
Here’s what this should look like, depending on when your device was manufactured and packaged.
Any sign of a broken or missing seal is a strong indicator that the device has been compromised. In this case, we encourage you to please contact Trezor Support via our chatbot, Hal.
The Ledger Donjon team demonstrated a way to bypass the authenticity check, and the firmware hash check specifically in Trezor Safe 3, using an advanced voltage glitching technique. The other countermeasures against supply chain attacks remain unchallenged. However, it is important to note:
No private keys can be hacked or PIN extracted using this attack.
The attack requires full physical access to the device. (This includes disassembling the casing, desoldering the microchip, modifying or extracting data using specialized tools, and then reassembling and repackaging the device without leaving any visible signs of tampering.)
If the device is purchased from an official source, it is highly unlikely that it has been tampered with.
This highlights why we always recommend purchasing directly fromTrezor.io or authorized resellers.
Self-custody with a hardware wallet like Trezor remains the safest way to store crypto.
With Trezor, you hold your own keys.
No exchange can freeze your funds.
No third party can access your wallet.
The real risk is trusting third parties; in this case, purchasing a Trezor hardware wallet from sources beyond our officially listed ones.
Even in a worst-case supply chain attack scenario, the attacker would still need to modify and distribute devices at scale, which remains highly impractical.
No. If you bought a device from an official source it is highly unlikely that there is anything wrong with your device. If there are signs of tampering when your order arrives, or you bought it from an unauthorized reseller, just reach out to Trezor Support or start a discussion on Trezor Forum and we’ll walk you through how to check for compromise.
Your funds remain safe, and there is no need for any action on your part.
Secure Elements provide an added level of protection against physical attacks.
Our in-built supply chain defenses include multiple security layers.
Trezor Suite makes tampered devices nearly impossible to distribute at scale.
Security is never static, and at Trezor we are continuously taking steps to improve our hardware and software. Ledger Donjon’s research highlighted one possible attack vector. It, however, does not undermine the core security of the Trezor Safe Family.
At Trezor, we fully embrace such security research because it helps strengthen the ecosystem. We will continue to refine our security measures and remain fully transparent about potential risks.
Finally, we recommend purchasing your Trezor hardware wallet or accessories directly fromTrezor.io or authorized listed resellers, as a best practice for your security.
Solana staking is now available in Trezor Suite, providing a secure and self-custodial way to grow your SOL holdings.
Unlike other staking solutions, staking using your Trezor hardware wallet ensures you remain in full control of your funds at all times, with no intermediaries or custodians involved.
By staking SOL, you contribute to network security and earn up to 7% APY in rewards — all while benefiting from the proven security of Trezor Suite.
Solana staking allows you to delegate your SOL tokens to a validator, who helps validate transactions and maintain the blockchain. In return, you receive SOL rewards, similar to how savings accounts generate interest.
When staking SOL in Trezor Suite, users delegate their SOL to our staking partner, Everstake. Established in 2018, Everstake is a validator trusted by 735K+ users across 70+ blockchain networks.
Fun fact: Approximately $1B of SOL (~1.5% of all staked SOL) staked with Everstake.
When you stake your SOL in Trezor Suite:
Your funds remain in your control
Only you can withdraw them
Rewards are automatically compounded, maximizing your staking potential
You can unstake anytime, with a short cool-down period of 1 epoch (approximately 2–3 days) before your SOL is fully available.
Instead of leaving your Solana tokens unused, staking allows you to grow your holdings while strengthening the Solana network.
Here’s why it’s worth considering:
Grow your SOL holdings: Receive up to 7% APY while holding your SOL.
Support the network: Your stake contributes towards helping secure the Solana blockchain and process transactions.
While many platforms offer staking, Trezor Suite provides the key advantage of complete security while staking your tokens.
Unlike custodial services that hold your funds, staking using your Trezor hardware wallet keeps your SOL tokens in your control at all times.
Trezor Suite makes staking SOL tokens simple & secure. Users benefit from:
100% security Your keys. Your Coins. Your Rewards. You own your keys, and only you can access your funds.
Seamless staking Delegate SOL in just a few clicks through Trezor Suite’s intuitive interface.
Competitive APY Maximize your staking returns with up to 7% APY, among the most competitive rates in the Solana ecosystem.
Automatic reward compounding Enjoy rewards that automatically compound, maximizing your returns over time.
Low minimum requirement Stake as little as 0.01 SOL, making it accessible for all users.
Learn more here:
Getting started with staking SOL in Trezor Suite is quick and easy. Check out our step-by-step guide here:
Is my SOL locked when I stake? Yes, but you can unstake at any time. A short cooling-off period of 1 epoch (approximately 2–3 days) applies before your SOL becomes fully available again.
How often do I receive staking rewards? Rewards are updated and distributed at the end of each epoch (2–3 days), with no manual intervention needed.
Can I stake less than 1 SOL? Yes! With Trezor Suite, you can stake as little as 0.01 SOL, making it easy for anyone to participate.
What happens if I want to stop staking? You can unstake anytime. After the cooling-off period (1 epoch which is approximately 2–3 days), your SOL will be available in your wallet.
Trezor Suite’s Solana Staking offers a secure, user-friendly way to earn up to 7% APY, empowering users to grow their SOL holdings effortlessly.
Keep full control of your tokens while contributing to the Solana network’s security and scalability.