Trezor bug bounty programs
trezor.io Updated
Trezor runs two public programs: a self-hosted bug bounty paying up to $100,000 and a Sorona bug bounty paying up to $100,000.
- Top reward
- $100,000
- Self-hosted
- Programs
- 2
- 2 pay cash
- Targets in scope
- 12
- 3 types, deduplicated
- Last change
- None yet
- Tracked since Nov 2026
Where to report
2 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.
Start here
Trezor
Self-hosted · Pays the most of the 2 programs: up to $100,000.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Trezor
Self-hosted · Bug bounty |
$100k (highest) | $10k (highest) | $5,000 (highest) | $2,000 (highest) | $100,000 | Partial | – | – | Open |
|
Trezor
Sorona · Bug bounty |
$100k | $10k | $5,000 | $2,000 | $100,000 | Partial | – | – | Open |
-
- Critical
- $100k (highest)
- High
- $10k (highest)
- Medium
- $5,000 (highest)
- Low
- $2,000 (highest)
- Safe harbor
- Partial
-
- Critical
- $100k
- High
- $10k
- Medium
- $5,000
- Low
- $2,000
- Safe harbor
- Partial
Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
12 targets across all 2 programs, each listed once with the programs that cover it. 7 excluded.
-
Blockbook and the backend infrastructure, AGPL-3.0, on a row capping at $10,000 at Critical
Products and areas
Covered by Sorona
-
The device surfaces that firmware drives: the bootloader and the firmware-update verification behind it, PIN and passphrase entry, seed generation and backup under BIP-39 and SLIP-39, per-coin transaction and message parsing and signing, the USB and host transport, and the confirmation screen a user approves against
Products and areas
Covered by Sorona
-
The hardware as a physical object, from non-invasive techniques through "Evil Maid" scenarios to chip decapping, and tampering with devices or accessories before they reach the buyer
Products and areas
Covered by Sorona
-
Trezor devices and their firmware, the first of the program's four asset categories and the one it calls by far the most important, covering the hardware, the firmware on it, physical device security and device-level supply-chain integrity
Products and areas
Covered by Sorona
-
Trezor Suite and Trezor Connect, in scope and paid on their own row up to $20,000 at Critical, shipped under the proprietary TREZOR REFERENCE SOURCE LICENSE rather than an open one
Products and areas
Covered by Sorona
-
trezor/trezor-firmware in full, which its own LICENSE.md splits into core and legacy (the firmware for the current line and for the Trezor One), storage (the PIN-protected encrypted storage), crypto (the MIT primitives), common (the coin definitions) and python
Products and areas
Covered by Sorona
No target matches. Try part of a host name, such as the company name.
Out of scope 7
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Anything whose only effect is a host-side display discrepancy, since the threat model already assumes "the host can be fully malicious and transactions need to be confirmed on Trezor's display"
Sorona
-
Clickjacking and tabnabbing with no direct security impact on the device
Sorona
-
Issues already publicly reported, or already known to Trezor
Sorona
-
Missing security headers without a working exploitable proof of concept
Sorona
-
Output of automated vulnerability scanners
Sorona
-
Phishing and social engineering that does not exploit a technical vulnerability
Sorona
-
Second and later reports of the same issue: only the first valid submission is paid, and severity sits at Trezor's discretion
Sorona
Recent changes
Reward and scope changes across every Trezor program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in Trezor products, from the NVD.
-
CVE-2020-18172 Critical
A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
-
CVE-2020-18172 Critical
A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
-
CVE-2019-14353 Medium
On Trezor One devices before 1.8.2, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN and BIP39 mnemonic. In
-
CVE-2019-14353 Medium
On Trezor One devices before 1.8.2, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be able to leverage this behavior to recover confidential secrets such as the PIN and BIP39 mnemonic. In
About this page
This page gathers every public program listed under trezor.io: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.