Key Takeaways
- As per reports, the hacker stole an estimated $8,100 from Trezor’s Zapper account.
- Trezor’s compromised account promoted a fake “TRZR” token presale on Solana, prompting users to send funds to a malicious wallet address.
Trezor, a leading cryptocurrency hardware wallet provider, faced a security breach on its official X account(formerly Twitter), which was compromised, likely due to a SIM swap attack. The hacker took control of the account and posted fraudulent messages promoting fake token sales and wallet scams.
The suspected breach was first brought to light by independent blockchain sleuth ZachXBT on March 19, who alerted the community of the suspicious activity.
Posts from Trezor’s compromised account advertised a fake “TRZR” token presale on the Solana network, urging users to send funds to a malicious Solana wallet address. The hacker also referenced a new memecoin called Slerf, potentially as a tactic to increase engagement. While the likely scam posts were promptly removed, concerns about Trezor’s account security measures were raised, especially since the hacker managed to steal approximately $8,100 from Trezor’s Zapper account.
Crypto commentator John Holmquist criticized Trezor for potentially failing to implement two-factor authentication (2FA) to secure its X account, emphasizing the importance of robust security practices. This incident follows a previous security breach in January, where Trezor exposed the contact information of nearly 66,000 users.
Trezor, known for its hardware wallets capable of storing over 9,000 coins offline, has faced security challenges in the past. In March 2023, it warned users about a phishing attack aimed at stealing investors’ money through a fake Trezor website. Additionally, scammers selling fake Trezor hardware managed to gain control of users’ private keys in another incident.
