Trezor 供应商泄露约 1.37 万客户数据，CZ 评论硬件钱包风险

Not a great month for hardware wallets.

Trezor disclosed a breach at its shipping provider affecting ~13.7K recent customers. ~11.7K had full name, email, phone and shipping address exposed. Trezor systems/private keys were not compromised. The leak directly links identities and physical addresses to known crypto holders, creating significant phishing, social-engineering and potential physical-security risk.

Hardware wallets are often considered "more secure" than software wallets. While I still think that is "generally true" in a few specific aspects, this incident reinforces an advantage of software self-custody wallets (such as Binance Web3 Wallet & Trust Wallet), without purchasing and shipping a physical device that links a user's identity and address to crypto ownership.

Not saying hardware wallets are "bad". Just different risk profiles. YZiLabs is an investor in many hardware wallets.

Security, privacy and convenience comes in many different shapes. The more we can educate our communities, the better. https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident