Skip to content
0:00 / 0:00

#trezor#hardwarehacking#voltageglitching

How I hacked a hardware crypto wallet and recovered $2 million

Joe Grand

454K subscribers • 2 videos on Hallway

YouTube
  • Recommended by 4 people: 2 on Hacker News, 1 on Lobsters and 1 in engineering communities.
  • Presented by Joe Grand, hardware hacker

Intermediate. Assumes working knowledge.

9.9M views4 years ago4 recommendations

SecurityHardwareReverse engineeringCryptographyElectronics

Joe Grand explains how he used voltage glitching and hardware fault injection to recover two million dollars from a locked Trezor One wallet.

I was contacted to hack a Trezor One hardware wallet and recover $2 million worth of cryptocurrency (in the form of THETA). Knowing that existing research was already out there for this device, it seemed like it would be a slam dunk. Little did I realize the project would turn into a roller coaster ride with over three months of experimentation, failures, successes, and heart-stopping moments. It reminded me that hacking is always unpredictable, exciting, and educational, no matter how long you've been doing it. In this case, the stakes were higher than normal: I only had one chance to get it right. Read about it on The Verge: theverge.com/2022/1/24/22898712/crypto-hardware-wallet-hacki… Project details: grandideastudio.com/portfolio/security/stm32-fault-injection… Check out Joe Grand here: YouTube: youtube.com/c/JoeGrand Twitter/X: x.com/joegrand Instagram: instagram.com/joegrandofficial Everything Else: joegrand.com Special thanks to: wallet.fail: wallet.fail Colin O'Flynn: twitter.com/colinoflynn NewAE Technology: newae.com Macdonald Entertainment Partners: macdonaldentertainmentpartners.com Chase McDaniel: mercuryroadmedia.com Dan Reich: danreich.com/i-had-2-million-dollars-in-crypto-locked-on-a-w…

Why it's here

4 people recommend this

What people say. Highly recommended as an exciting and educational demonstration of real-world hardware hacking and side-channel attacks.

u/Docmanduin r/ReverseEngineering • Recommends

How I hacked a hardware crypto wallet and recovered $2 million

dgvon Lobsters • Recommends

How I hacked a hardware crypto wallet and recovered $2 million

anyfactoron Hacker News • Recommends

On “Starlink User Terminal Modchip”

…oing up, meaning tools that I made is worthless because anything I didn't make sense because stonks go up. A Complex JavaScript project felt harder to write than I anticipated. So again, community, challenge and knowing your limits. If you are looking for hardware hacking motivation, these two videos blew my mind. Joe Grand, crypto wallet hacking: link to this video link This channel is also good, but it is a bit wacky: link Edit: Also validation. When WSB got extremely pop…

barbazooon Hacker News • Recommends

On “Kaspersky: Case study: fake hardware cryptowallet (Trezor)”

Somewhat related, I was recently pointed to a cool video about someone hacking a Trezor One. Very enjoyable watch. link to this video > I was contacted to hack a Trezor One hardware wallet and recover $2 million worth of cryptocurrency (in the form of THETA).

GistNoesison Hacker News • Mentions

On “Recovering redacted information from pixelated videos”

Even the best can make obvious mistakes. "I hacked a hardware crypto wallet and recovered $2M link to this video" link Showing a blurry 16 out of 24 trezor wallet seed words link to this video

johtsoon Hacker News • Mentions

On “Man has two more chances before $232M in Bitcoin is lost forever”

Joe Grand is one of those people: link to this video Also here's a presentation on finding vulnerabilities in Ironkey flashdrive: link