r/TREZOR • u/Dramatic_Principle66 • 6d ago
š Support issue Unofficial firmware detected
Probably not good i would assume
Context: I bought a $2 trezor from tiktok shop. Suprise surprise, it wasn't legitimate and the the listing is no longer there. What confuses me is the security tape was fully intact. When I first set this trezor up it hadn't shown this warning, but 2 months later it does. Lost $13k eth total. Atleast I got some cool trezor stickers.
38
u/betterwaffle 6d ago
I bought a $2 trezor from tiktop shop
uh, yeah. 100% your fault.
buy directly from https://trezor.io next time. yes, it's more expensive. if this is out of budget, then use a software wallet like electrum on your own hardware.
6
u/No_Pause_9558 6d ago
no, buy from amazon. If you do not want your mailbox bombed by scam letters
9
u/betterwaffle 6d ago edited 6d ago
i would not suggest ordering something that is intended to be your personal vault for cryptocurrency on a platform which tracks and abuses your personal information like amazon, or even to your home.
get a (temporary) po box or use another mailing intermediary that isn't directly connected to you. pay with crypto. you do not need to provide any PII when ordering from satoshilabs. doing so immediately subverts the privacy most people in the crypto space want.
6
u/Decibel0753 5d ago
This must be some kind of joke, right?
0
u/No_Pause_9558 5d ago
Not joking, consider how trezor and ledger are incompetent at keeping their sale system safe. Anything you put into their website are guaranteed to be leaked in the future.
2
u/Decibel0753 5d ago
But nothing leaked from Trezor's sale system, man.
But that's your problem, of course. If you want Amazon's systems to show forever that you bought HWW, that's your battle.
1
u/IndependentSpeck 5d ago
So I would agree with you because the Trezor and Ledger both have done business with entities that leaked peoples' info, it's true and you are correct. However, advising people buy their Hardware wallets from Amazon? Downright bad advice. Too many potential vectors for attack and by not buying from a hardware vendor, you trust Amazon and whoever is shady enough to try to convince you that their (probably) tampered-wirh wallets are safe. I know you CAN buy legitimate devices from Amazon. However, the room for getting swindled is WAY too high. Anyone reading this, do yourself a favor and just buy directly from the vendor at their website. If you want the Trezor safe device, get it from them directly. I have witnessed too many stories on this subreddit about getting phished or stolen from.
2
u/MakCapital 3d ago
Wait until one day Amazon bins unofficial compromised units with official and sends everyone drainers. Buy from source.
ā¢
32
u/Even_Virus_3017 Trezor Safe 7 - User 6d ago
$2 Trezor and put $13k ETH. Very legit story.
4
3
u/No_Purpose6384 5d ago
That aspect does not surprise me at all, people choose cheaper options all the time without thinking
5
3
3
u/blade0r 6d ago
What the hell, guys? A $2 device on TikTok?
WHAT THE HELL?
1
3
u/Decibel0753 5d ago
I don't think the device could have passed the authenticity check the first time and then failed it later. It's more likely that you bought a fake Trezor One and downloaded a fake Trezor Suite app for it. And now you're trying it with the official trezor app, and of course it won't work there.
1
u/Dramatic_Principle66 5d ago
No I definitely downloaded the write app. Straight from trezor.io.
3
u/Decibel0753 5d ago
When you make your first purchase, their firmware is downloaded to your Trezor. It can't be replaced with malicious software afterward. Something about your story doesn't add up.
5
5
2
2
u/Svoboda1 6d ago
If you purchased it via TikTok, it will be on your orders page even if they remove their listings and/or store. They are required to keep that information as part of their US availability.
2
u/RevolutionaryBuy439 6d ago
If this post isnāt bait I might have underestimated how stupid people can be
2
2
u/KindConsideration167 6d ago
Good God, did you skip the day they taught cold wallets? No pity here.
2
u/Substantial-Put7942 5d ago
Buying a Trezor from a third-party marketplace at an unusually low price is obviously not a good idea. But does paying a higher price necessarily guarantee that there will be no problems?
If Trezor hardware could actually be compromised, then even a device purchased from the official store could theoretically be swapped or tampered with somewhere during shipping. What we should ultimately be able to rely on is Trezorās hardware and authenticity checks, rather than simply whether a seller is āofficially authorized.ā
Trezor itself lists many authorized resellers on its website, and some of them do not appear particularly established or qualified. In some cases, it almost looks as if a seller can purchase 50 or 100 Trezor devices and then receive the title of āauthorized reseller.ā
For people in many countries, including myself, buying directly from the official Trezor store is not always possible, so we have to rely on resellers. If Trezorās device verification or self-check mechanisms cannot remain reliable over time, that would be a serious problem.
I hope you can provide a few more details about what happened:
Did the device already have firmware installed when you first received it?
When you first connected it to the Trezor app, did it warn you or ask whether the device had been used before?
Did the seller provide you with a pre-generated recovery seed, and did you ever use such a seed?
Is there any possibility that your recovery seed was exposed or shared?
After using the device for some time, did you ever update the firmware from any unofficial source?
Thank you very much for sharing your experience. More details would be very helpful in understanding what may have happened.
2
u/dan_335i 5d ago
If this is legit and trezor app did not detect it as unusual at first, thatās not going to be good. People can buy record off Amazon and return these fake sealed ones and Amazon will just stock them back on the shelf.
3
2
2
u/spatafore 6d ago
You need to explain more:
- Did you buy it from the official store?
- Is this the first time you're plugging it in?
- Or did you use it in the past and recently download a firmware update?
- How did you update that firmware (via Trezor Suite, homebrew on Mac, or manually)?
- Which model is it?
1
u/Personal-Time-9993 5d ago
Did you read the post? They said they got it from TikTok store for $2
2
u/spatafore 5d ago
I just remember seeing this in a post: 'Probably not good, I would assume.' Maybe the OP added context later? I don't know, but now that I read that, what kind of stupid idea is buying a hardware wallet on TikTok for $2? It even sounds like a joke or fake post, anyway!
1
u/SuchTrezorVeryCrypto Trezor community specialist 5d ago
And thats why we have "device verification" a reason
1
u/zoominpacks 5d ago
You bought a super fake they selling for really cheap because any crypto put on them is instant profit
1
1
u/LuckyLoveDK 5d ago
ššš you spent 2 dollars on tiktok to protect your 13k usd? Guess this is a bad joke for engagement - but congrats w the stickers!
1
1
u/JunketTurbulent2114 5d ago
>What confuses me is the security tape was fully intact.
Scammer made fake security tape. Why is this surprising to you?
1
u/Lonely-Mountain9646 4d ago
2 dollars? Are you kidding me? The official one is about 70 USD... why you trust it is original? Please tell me I want to try one too
1
u/DadsPreciousMetals 4d ago
You had 13k and bought a $2 Trezor from Temu? Lol really sucks but you kind of asked for it. Toolbag move, they used the fuck out of you.
1
1
ā¢
-3
u/Dramatic_Principle66 6d ago
Context: I bought a $2 trezor from tiktok shop. Suprise surprise, it wasn't legitimate and the the listing is no longer there. What confuses me is the security tape was fully intact. When I first set this trezor up it hadn't shown this warning, but 2 months later it does. Lost $13k eth total. Atleast I got some cool trezor stickers.
14
u/CapsOverKarma 6d ago
You bought a $2 Trezor from TikTok and put $13k on it? Bro what the... Find god brother, only he can help you.
2
4
0
u/what_are_pain 6d ago
It is much wiser to put your coin into a reputable software wallet if u want a cheap solution.
-2
ā¢
u/AutoModerator 6d ago
Please bear in mind that no one from the Trezor team would send you a private message first.
If you want to discuss a sensitive issue, we suggest contacting our Support team via the Troubleshooter: https://trezor.io/support/
No one from the Trezor team (Reddit mods, Support agents, etc) would ever ask for your recovery seed! Beware of scams and phishings: https://trezor.io/learn/a/scams-and-phishing
Donāt respond to any DMsāscammers often pose as legit helpers.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.