How I hacked a hardware crypto wallet and recovered $2 million

I was contacted to hack a Trezor One hardware wallet and recover $2 million worth of cryptocurrency (in the form of THETA). Knowing that existing research was already out there for this device, it seemed like it would be a slam dunk. Little did I realize the project would turn into a roller coaster ride with over three months of experimentation, failures, successes, and heart-stopping moments. It reminded me that hacking is always unpredictable, exciting, and educational, no matter how long you’ve been doing it. In this case, the stakes were higher than normal: I only had one chance to get it right.

Read about it on The Verge: https://www.theverge.com/2022/1/24/22898712/crypto-hardware-wallet-hacking-lost-bitcoin-ethereum-nft

Check out Joe Grand here:
YouTube: https://youtube.com/c/JoeGrand
Website: http://www.grandideastudio.com
Twitter: https://twitter.com/joegrand

Special thanks to:
wallet.fail: https://wallet.fail
Colin O’Flynn: https://twitter.com/colinoflynn
NewAE Technology: https://newae.com
Macdonald Entertainment Partners: https://macdonaldentertainmentpartners.com
Chase McDaniel: https://www.mercuryroadmedia.com
Dan Reich: https://danreich.com/i-had-2-million-dollars-in-crypto-locked-on-a-wallet

ABOUT OFFSPEC.IO

offspec.io (https://offspec.io) is a dedicated team of hackers and entrepreneurs specializing in password recovery from hardware and software wallets. We’re always looking for new and interesting projects where we can use our skills to help others.

Recommended For You

About the Author: Beverly Barnhart

28 Comments

  1. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  2. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  3. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  4. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  5. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  6. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  7. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  8. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  9. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  10. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me

  11. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  12. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  13. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  14. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  15. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  16. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  17. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  18. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  19. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  20. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I just withdraw $60k from this πŸ‘† platform

  21. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thanks for helping me sir I really appreciate the 3btc I confirmed in my life

  22. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  23. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  24. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  25. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  26. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  27. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    Thank you for helping me too he got me $5000 Bitcoin few hours ago SCOTTHACKS

  28. π—¦π—–π—’π—§π—§π—›π—”π—–π—žπ—¦ 𝗒𝗑 π—§π—˜π—Ÿπ—˜π—šπ—₯𝗔𝗠 says:

    I am highly impressed with SCOTTHACKS

Leave a Reply

Your email address will not be published. Required fields are marked *