My trezor one is compromised or tampered?

Security
1

Seems like no matter what i try, when i try to update my trezor one firmware it seem to always revert back to 1.13.1 version firmware, feels like it is some pre-defined firmware forced to be used and ignore anything else.First i factory reset my device, and then try to custom install the latest 1.14.1 version.

2

python -m trezorlib.cli.trezorctl get-features
Features (29 bytes) {
bootloader_mode: True,
firmware_present: False,
language_version_matches: True,
major_version: 1,
minor_version: 12,
model: ‘1’,
patch_version: 1,
vendor: ‘trezor’,
}

3

python -m trezorlib.cli.trezorctl firmware update -f trezor-t1b1-1.14.1.bin
Trezor One v2 firmware (1.8.0 or later)
Firmware version 1.14.1 build 0
Firmware fingerprint: 9d0b9070d391d6b71518d2a8143599083ff1afcd3c5fa4136ace46042d7f61e4
Firmware is appropriate for your device.
Uploading [####################################] 100%

4

python -m trezorlib.cli.trezorctl get-features
Features (215 bytes) {
auto_lock_delay_ms: 600000,
backup_availability: NotAvailable (0),
bootloader_hash: 32 bytes 0x94f1c90db28db1f8ce5dca966976343658f5dadee83834987c8b049c49d1edd0,
busy: False, device_id: ‘C6858CA98D3334245BF2542A’,
fw_vendor: ‘SatoshiLabs’,
initialized: False,
language: ‘en-US’,
language_version_matches: True,
major_version: 1,
minor_version: 13,
model: ‘1’,
no_backup: False,
passphrase_protection: False,
patch_version: 1,
pin_protection: False,
revision: 20 bytes 0x2a65d18200580005dc419b9569ed97fae440806a,
safety_checks: Strict (0),
session_id: 32 bytes 0xc9df5b257f2e9d8f7cf051476c8516dfa39749132905678060ecad180b31130f,
unfinished_backup: False,
unlocked: True,
vendor: ‘trezor’,
wipe_code_protection: False,
}

5

yup, likely to be compromised or tampered.

make sure your trezorctl is on the latest version, then try to set up the wallet via trezorctl device setup (or via an up-to-date Suite). The entropy check will run automatically. If it fails, your device is definitely malicious. (even if it succeeds, it doesn’t mean your device is ok, so don’t use that wallet)

in any case, you should contact support via the chat bubble on Support | Trezor

6

thanks for the reply,

yea thats what i thought, since Trezor One doesnt have the on-chip genuineness check like the newer models so basically there is no way to tell if its legit or not.
Plus - i bought this trezor from a 3rd party reseller and not from the official trezor website.

In your opinion, is it possible for such a tampered device to be able to somehow inject or compromise my windows OS once i have connected it to my USB port ?

7

I wouldn’t worry too much.

If the device speaks Trezor protocol (means you can connect it to Suite / trezorctl), it is very likely running a modified Trezor firmware, with the intention to get you to use one of the preconfigured seeds, then take your money.

Technically speaking, it could be modified to exploit your computer. Practically, it’s a significant investment of resources to get that to work right together with the firmware functionality already there.
Plus, they would be burning this on randos shopping for a cheap, significantly outdated Trezor model on a 3rd party marketplace – not exactly a high-value target range.