The recent disclosure of Kraken about Trezor hardware wallet's vulnerability has posed some serious questions. In short, the Kraken Security Labs observed that both the Tezor Model T and Trezor One hardware wallets could be breached easily. The attack was backed by voltage glitching that could elicit an encrypted seed.
Monero's former lead maintainer, Riccardo Spagni cited 'passphrase' could be the answer. During Magical Crypto Friends' most recent live stream, Spagni cited
“Trezor, in particular, in its current form, is very prone to glitching attacks and so use a passphrase. It does make it more cumbersome, but at least the passphrase is not stored on the device, so it is almost like a second factor of authentication.”
In a similar episode, Managing Director of Litecoin Foundation, Charlie Lee, made another point. Charlie Lee featured on the suggestions of using ‘giveaway wallets’ and cited
“I have seen a lot of people giving away sealed Ledger. I think that is kind of a bad idea. Because you, kind of, want to make sure to buy your Ledgers and Trezors directly from the manufacturer. You never know if it is been tampered with and you do not want to take risks.”
It is not easy to manage one's cryptocurrency, and among all the options available, hardware wallets were considered to be the best option as it is mostly offline. However, the recent discovery would surely make the manufacturers rethink their safety and security strategy for these wallets as well.