Trezor Wallet Security Breach | Alarming Theft of ETH, XRP, and SOL
A serious security breach of a Trezor wallet has resulted in the unauthorized theft of ETH, XRP, and potentially SOL, igniting concerns across the crypto community. This incident sheds light on possible vulnerabilities in Trezor devices, prompting scrutiny from both users and experts alike.
Incident Overview
On July 10, 2025, a Trezor wallet linked to the Trezor Suite Lite app experienced a breach. The stolen ETH was transferred to a wallet labeled "MEXC 16," and approximately 97.4 XRP was sent to a known MEXC deposit address. The victim is also worried about potential losses in their Solana assets.
Victim's Actions After the Breach
Following the incident, the victim has taken several essential steps:
Filed a support request with MEXC, supplying transaction details.
Submitted a police report in the Netherlands.
Monitored wallet addresses using tools like Etherscan and XRPScan.
Completed KYC at MEXC to request account freezes.
"How did someone get access to transfer my funds?"
Community Insights and Concerns
Feedback on various forums shows skepticism and concern. Key themes from users include:
Seed Phrase Exposure: Some speculate the victim's seed phrase may have been accessed. A user commented, "Your Seed Phrase was seen by someone, possibly a roommate or friend."
Limitations of Trezor Suite Lite: Many note that the Trezor Suite Lite is a "watch-only" app, raising questions about how the transfer occurred.
Malicious Contracts: There are concerns that the victim might have interacted with a harmful smart contract. A comment raised the question, "Did you trade any coins or engage in any DeFi/NFT/staking activities?"
In addition, a user mentioned that the theft rate involving compromised cold wallets is likely under 0.1%, pointing out that most losses stem from neglect of the seed phrase, phishing, or social engineering rather than direct hacks.
Key Points of Interest
📉 The compromised Trezor was purchased from the official website.
🔒 The victim insists they never disclosed their seed phrase or stored it digitally.
⚠️ Calls for a review of Trezor's software security have increased following this incident.
The ongoing situation highlights a critical need for crypto users to reassess their security measures. With incidents like this rising in frequency, will users adapt their practices to safeguard their digital assets?