Trezor has increased the maximum length of the passphrases used to protect its hardware wallets from 50 to 128 characters. The update, announced on November 1, requires an updated version of Trezor Suite and compatible device firmware, while earlier versions retain the previous limit. It follows the exploitation of a Coldcard vulnerability in July, which allowed attackers to reconstruct some recovery phrases and steal more than $100 million in cryptocurrency. According to Trezor, some affected users who had set strong, unique passphrases kept their funds protected, but those who generated their recovery phrases on vulnerable Coldcard devices remain exposed until they transfer their assets to a newly generated wallet.
Source: Read the original article
