Trezor package opened by customs | Bitcointalksearch.org

coolcoinz

legendary

Activity: 2814

Merit: 1192

Quote from: dkbit98 on December 09, 2024, 11:28:24 AM

There is nothing wrong with your trezor, just use it, there is no need for you to invent the wheel all over again.

I agree. The outside cover being open does not compromise the device. It should be good to go, I'd keep it and save myself from all the trouble.
Great customer service though. Trezor gained a point here.

Quote from: Porfirii on December 09, 2024, 03:32:56 PM

But why? reading the whole thread, everyone took for granted that this mere possibility would be a sure thing, and nobody encouraged the OP to try again. To be able doesn't mean they would.

If the device is sealed and there are no signs of the cover being opened, it's safe to use. Hardware wallets cannot be accessed remotely and you can't plant any malware that way. If there's no signs that it was physically tampered with (the device not the package) it's good to go.

I always refuse to accept damaged packages. I don't care if it was customs or someone else. Couriers have protocols for such cases. They write that the package is open and you sign that and it gets returned to sender.

Porfirii

legendary

Activity: 2002

Merit: 2534

The Alliance Of Bitcointalk Translators - ENG>SPA

Quote from: m2017 on December 07, 2024, 07:50:49 AM

Quote from: new19980 on December 04, 2024, 01:46:04 PM

they may do it again with the new device (Break the seal)

If it was customs officers, they will be able to repeat it.

But why? reading the whole thread, everyone took for granted that this mere possibility would be a sure thing, and nobody encouraged the OP to try again. To be able doesn't mean they would.

We all agree that a sealed device is the safest option, and since Trezor was willing to re-send the device at no cost, what was the problem? if the seal was broken again, then nothing changed, but perhaps a different agent wouldn't ruin it.

It's also clear that the OP was impatient and wanted to test the device. Most probably the device is safe and shit won't happen, but using it was not a good security practice.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: new19980 on December 08, 2024, 06:06:21 AM

Isnt Metamask a Hot wallet is it really safe to store USDT ? if thats the case i may consider split my USDT between Metamask and Trezor

No it's not safe at all, you are not making anything better with that splitting plan, and it's not a good idea to hold USDT or any other stablecoins long term in any wallet.
There is nothing wrong with your trezor, just use it, there is no need for you to invent the wheel all over again.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: new19980 on December 06, 2024, 04:21:13 PM

Electrum doesnt support USDT i bought Trezor device to store USDT till the next bitcoin bear market
after that i will buy BTC and send it to my Electrum cold wallet

Without getting into the main question/concern - did you know that most so-called stablecoins can be frozen no matter where you store them? Since you say that cryptocurrencies are illegal in your country, keep in mind that a hardware wallet is not something that provides you with complete protection. It's not that I'm scaring you, I'm just pointing out another potential risk.

[UPDATED]PSA: Most Stablecoins Can Be Frozen, Even in Your Own Wallets

joniboini

legendary

Activity: 2170

Merit: 1789

Quote from: new19980 on December 08, 2024, 06:06:21 AM

Isnt Metamask a Hot wallet is it really safe to store USDT ? if thats the case i may consider split my USDT between Metamask and Trezor

That's true, but I was referring to the fact that you can use an open-source wallet in a live OS environment to store your USDT since you don't seem to plan on using it regularly. You can use other open-source wallet apps to generate your seed phrase if you aren't comfortable with it, CMIIW. Besides, it's not like your asset will be "locked" to MetaMask or any wallet that you choose to do this.

new19980

newbie

Activity: 48

Merit: 0

Quote from: joniboini on December 07, 2024, 10:16:59 PM

Quote from: new19980 on December 06, 2024, 04:21:13 PM

Electrum doesnt support USDT i bought Trezor device to store USDT till the next bitcoin bear market
after that i will buy BTC and send it to my Electrum cold wallet

I see. So you don't plan to use this Trezor wallet regularly then? If you only need it to generate a wallet to receive USDT, can't you do the same with a live Linux OS and generate your address with MetaMask or something similar? Considering you have an Electrum cold wallet setup already I don't think you'll have much issues setting up that. Well, hopefully everything is fine and you won't lose that money after a few months of storing it.

Isnt Metamask a Hot wallet is it really safe to store USDT ? if thats the case i may consider split my USDT between Metamask and Trezor

joniboini

legendary

Activity: 2170

Merit: 1789

Quote from: new19980 on December 06, 2024, 04:21:13 PM

Electrum doesnt support USDT i bought Trezor device to store USDT till the next bitcoin bear market
after that i will buy BTC and send it to my Electrum cold wallet

I see. So you don't plan to use this Trezor wallet regularly then? If you only need it to generate a wallet to receive USDT, can't you do the same with a live Linux OS and generate your address with MetaMask or something similar? Considering you have an Electrum cold wallet setup already I don't think you'll have much issues setting up that. Well, hopefully everything is fine and you won't lose that money after a few months of storing it.

new19980

newbie

Activity: 48

Merit: 0

Quote from: pawanjain on December 07, 2024, 11:35:26 AM

To all those people who are suggesting to do a factory reset and generate new seed, is it as good as a new sealed device ?
Would you prefer using an old device which is used by someone by just doing a factory reset and generating new seed ?
I guess, it's just the same in this case too right ? You never know what can happen one the seal is broken.

Who said that someone used it ? im 90 percent sure that its done by customs
this isnt first time i receive a package opened and damaged by those idiots
And if it was someone expert who did it im sure he will find a way to even return the seal back somehow
since the usb port seal is safe and intact which is the most important one for the hacker since he cant modify the device without
removing that seal and trezor suite didnt detect any installed firmware

Rikafip

legendary

Activity: 1722

Merit: 5937

Quote from: new19980 on December 07, 2024, 11:36:02 AM

Yeah i did reset to factory twice and im using now the third new generated seed with a passphrase
i did deposit 120$ and we will see since if i did deposit small amount like 20$ the hacker may wait till i receive more
before he drain the wallet so i used 120$ as bite i also did withdraw and deposit multiple times just in case of Dark Skippy Attack Grin

If someone went into such trouble to fiddle with your hardware wallet, I doubt that he would be tempted by $120 either as for someone with sich knowledge, that amount should be peanuts.

I've been thinking about your situationm and honestkly I am not sure what I would do, with biggest problem being that you can't easily just order another wallet as same thing may happen again. Either way, wouldn't like to be in your skin and hopefully it was just your nosy customs service and not something more sinister.

new19980

newbie

Activity: 48

Merit: 0

Quote from: m2017 on December 07, 2024, 07:50:49 AM

With such input data, the authenticity of this hardware wallet is the least of the problems you may have.

I could suggest you to use this device sent to you with the proviso to send only a couple of bucks to this wallet and see what happens to the contents of the wallet. This will dispel your doubts.

P.S. for the paranoid: don't forget to reset the device to factory settings again.

Yeah i did reset to factory twice and im using now the third new generated seed with a passphrase
i did deposit 120$ and we will see since if i did deposit small amount like 20$ the hacker may wait till i receive more
before he drain the wallet so i used 120$ as bite i also did withdraw and deposit multiple times just in case of Dark Skippy Attack Grin

pawanjain

hero member

Activity: 2702

Merit: 716

Nothing lasts forever

To all those people who are suggesting to do a factory reset and generate new seed, is it as good as a new sealed device ?
Would you prefer using an old device which is used by someone by just doing a factory reset and generating new seed ?
I guess, it's just the same in this case too right ? You never know what can happen one the seal is broken.

m2017

legendary

Activity: 1792

Merit: 1296

Playbet.io - Crypto Casino and Sportsbook

Quote from: new19980 on December 04, 2024, 01:46:04 PM

They offered sending me a new device in exchange of destroying the current one and taking video proof for that

This is a great solution to your problem. But such responses from the manufacturers' support make me doubt the cost price of these devices (market value), if the company is ready to send a new hardware wallet for free. It seems to me that these devices are overpriced.

Quote from: new19980 on December 04, 2024, 01:46:04 PM

but since im living on third world country and customs usually opening packages

Well, you've found the culprit of the incident. If it was the customs officers who did it, then you hardly have to worry about the device (authenticity). I don't think (but it's theoretically possible) that there could be enough qualified specialists among their employees who could slip you a hacked device.

Quote from: new19980 on December 04, 2024, 01:46:04 PM

they may do it again with the new device (Break the seal)

If it was customs officers, they will be able to repeat it.

Quote from: new19980 on December 04, 2024, 01:46:04 PM

also my coutry is against crypto and considered illegal i gambled and got lucky this time to not get seized but who
know what may happen next time Undecided

With such input data, the authenticity of this hardware wallet is the least of the problems you may have.

I could suggest you to use this device sent to you with the proviso to send only a couple of bucks to this wallet and see what happens to the contents of the wallet. This will dispel your doubts.

P.S. for the paranoid: don't forget to reset the device to factory settings again.

new19980

newbie

Activity: 48

Merit: 0

Quote from: sokani on December 07, 2024, 04:44:08 AM

Quote from: new19980 on December 05, 2024, 03:26:40 PM

Update: I ended up just using the device when i link it to trezor suite it didnt detect any installed Firmware
so i just installed the firmware then generated a seed and did a factory reset then regenrate a new seed and used
a passphrase Now i just deposited 120$ and im planning to wait 1-3 months to see if everything is good or the wallet
will get drained Grin

If the hardware device was compromised, updating the firmware to the latest version should overwrite any malicious file. So, you should be fine. Having said that, I just want to add that If you've funds untouched in a compromised wallet doesn't make it any safe. Though, it may depend on the malware deployed. Dark Skippy for example requires the owner to sign two transactions before an attacker can remotely steal the seed phrase. The first transaction reveals the first half of the seed and the second transaction reveals the second half.

Trezor suite have device security check so it can detect any malicious files and also the trezor suite didnt detect any installed firmware

sokani

sr. member

Activity: 658

Merit: 441

Quote from: new19980 on December 05, 2024, 03:26:40 PM

Update: I ended up just using the device when i link it to trezor suite it didnt detect any installed Firmware
so i just installed the firmware then generated a seed and did a factory reset then regenrate a new seed and used
a passphrase Now i just deposited 120$ and im planning to wait 1-3 months to see if everything is good or the wallet
will get drained Grin

If the hardware device was compromised, updating the firmware to the latest version should overwrite any malicious file. So, you should be fine. Having said that, I just want to add that If you've funds untouched in a compromised wallet doesn't make it any safe. Though, it may depend on the malware deployed. Dark Skippy for example requires the owner to sign two transactions before an attacker can remotely steal the seed phrase. The first transaction reveals the first half of the seed and the second transaction reveals the second half.

new19980

newbie

Activity: 48

Merit: 0

Quote from: joniboini on December 06, 2024, 05:08:54 AM

Quote from: new19980 on December 05, 2024, 03:26:40 PM

a passphrase Now i just deposited 120$ and im planning to wait 1-3 months to see if everything is good or the wallet
will get drained

That amount is too big to test the water for my taste. On the other hand, there's no guarantee that we can find out which malware or additional apps are installed this way. I'd follow the advice to create my own hardware wallet or use a dedicated computer as mentioned above. I've been using the Electrum cold storage setup and so far it works perfectly. Maybe you should try and experiment with them if your country's regulations don't change. CMIIW.

Electrum doesnt support USDT i bought Trezor device to store USDT till the next bitcoin bear market
after that i will buy BTC and send it to my Electrum cold wallet

joniboini

legendary

Activity: 2170

Merit: 1789

Quote from: new19980 on December 05, 2024, 03:26:40 PM

a passphrase Now i just deposited 120$ and im planning to wait 1-3 months to see if everything is good or the wallet
will get drained

That amount is too big to test the water for my taste. On the other hand, there's no guarantee that we can find out which malware or additional apps are installed this way. I'd follow the advice to create my own hardware wallet or use a dedicated computer as mentioned above. I've been using the Electrum cold storage setup and so far it works perfectly. Maybe you should try and experiment with them if your country's regulations don't change. CMIIW.

new19980

newbie

Activity: 48

Merit: 0

Update: I ended up just using the device when i link it to trezor suite it didnt detect any installed Firmware
so i just installed the firmware then generated a seed and did a factory reset then regenrate a new seed and used
a passphrase Now i just deposited 120$ and im planning to wait 1-3 months to see if everything is good or the wallet
will get drained Grin

pakhitheboss

hero member

Activity: 2156

Merit: 803

Top Crypto Casino

Quote from: dkbit98 on December 04, 2024, 03:31:40 PM

I don't think your customs officials are experts in opening trezor case without a trace and making some malicious change with hardware Wink

You might never know how good a custom official can be, in case if you haven't boarded an international flight in 2023 or 2024. They are now highly trained depending on the country they belong or they are operating. I personally have not encountered such a mess yet, I will not deny the theory by OP.

If the OP is someone questionable, he might be at a risk of losing everything. If not then still he can get his wallet hacked if anyone has injected a virus on his hardware wallet. The current market conditions is bullish and everyone in the customs knows how physical wallet works.

I think and I do think in a responsible manner that OP should not use a physical wallet that has been already opened. It is better for the OP to find alternatives to secure the assets.

?

Activity: -

Merit: -

Quote from: new19980 on December 04, 2024, 01:46:04 PM

security seal was opened and the seal of the device itself on usb port was safe
as you see in the pictures it it safe to use the device ?

who
know what may happen next time Undecided

some people ordered pagers, and those were tampered so expertly that nobody found out until they went BOOM.

Peanutswar

legendary

Activity: 1750

Merit: 1329

Top Crypto Casino

Theres an authorized resellers with the trezor have you seen this already?.

Code:

trezor.io/resellers

Because if you buy with their official website consider the need to pay the additional cost, but it seems quite weird because customs just inspect the item and they have a scanners so they don't need to open the wallet itself and its hard to trust this anymore once your device is already opened to avoid getting more damage if the unit is compromised. Generating new seed is an ideal thing than make it over looked and held headache soon.

Ronsbit

member

Activity: 93

Merit: 10

You never can tell what might happen the next time mate. Maybe you should just do a factory a reset as ABCbits advised and do a proper check on it to know if it is free, safe and secured to use so you do not make any mistake.

These days officers can not be trusted with the way they behave, a mere check could have let them know that such package is not harmful or posses a threatening device that would warrant such act from them. This has led me to ask if they did not scan to know if there is any potential threat in it as customs does to parcel.

ABCbits

legendary

Activity: 2870

Merit: 7490

Crypto Swap Exchange

Quote from: new19980 on December 04, 2024, 01:46:04 PM

They offered sending me a new device in exchange of destroying the current one and taking video proof for that

but since im living on third world country and customs usually opening packages
they may do it again with the new device (Break the seal)
also my coutry is against crypto and considered illegal i gambled and got lucky this time to not get seized but who
know what may happen next time Undecided

Factory reset and update firmware may be enough to reduce some security risks. But IMO this is one of few cases where you should consider either,
1. Using dedicated computer, laptop or phone device exclusively for cryptocurrency wallet purpose.
2. Build your own hardware wallet. But you'll need some electronics skill and find shops which sell electronics/IoT parts.

Findingnemo

hero member

Activity: 2366

Merit: 793

Bitcoin = Financial freedom

Quote from: new19980 on December 04, 2024, 02:17:02 PM

Yeah our customs are fools im thinking about just generate a seed then wipe the device
and generate a new seed and use a passphrase but im not sure if that enouph to be 100/100 safe

Yes, it should be enough to eliminate the chances of tampering. All you need to do is to factory reset and then while setting up the device just create a new seeds and Passphrase is extra layer of security as well.

Since you mentioned that you bought from official website and crypto is considered as illegal then I don't think you got any other choice as well. If you're still paranoid about the security then why not try and Airgapped cold wallet?

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: new19980 on December 04, 2024, 02:17:02 PM

Yeah our customs are fools im thinking about just generate a seed then wipe the device
and generate a new seed and use a passphrase but im not sure if that enouph to be 100/100 safe

I don't think your customs officials are experts in opening trezor case without a trace and making some malicious change with hardware Wink

You can always wipe/reset your device and generate new seed phrase with additional passphrase for added security.
Another option is to generate seed words offline with iancoleman tool and them import those words in your trezor.

new19980

newbie

Activity: 48

Merit: 0

Quote from: dkbit98 on December 04, 2024, 02:10:55 PM

This guys from customs are crazy!
I can understand opening a package for basic inspection, but removing the seal is unacceptable.
They probably didn't mess with the hardware itself and you can still use it, but you never know.

They offered sending me a new device in exchange of destroying the current one and taking video proof for that
Cool move from Trezor, but you can't be sure if customs will repeat the same thing with new package, and you probably have to pay import fees again for new package.

Best thing is to purchase hardware wallets in local shop, but you don't have this option.

Yeah our customs are fools im thinking about just generate a seed then wipe the device
and generate a new seed and use a passphrase but im not sure if that enouph to be 100/100 safe

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: new19980 on December 04, 2024, 01:46:04 PM

security seal was opened and the seal of the device itself on usb port was safe

This guys from customs are crazy!
I can understand opening a package for basic inspection, but removing the seal is unacceptable.
They probably didn't mess with the hardware itself and you can still use it, but you never know.

Quote from: new19980 on December 04, 2024, 01:46:04 PM

They offered sending me a new device in exchange of destroying the current one and taking video proof for that

Cool move from Trezor, but you can't be sure if customs will repeat the same thing with new package, and you probably have to pay import fees again for new package.

Quote from: new19980 on December 04, 2024, 01:46:04 PM

but since im living on third world country and customs usually opening packages
they may do it again with the new device (Break the seal)
also my coutry is against crypto and considered illegal i gambled and got lucky this time to not get seized but who
know what may happen next time Undecided

Best thing is to purchase hardware wallets in local shop, but you don't have this option.

new19980

newbie

Activity: 48

Merit: 0

Hi i bought a trezor safe 3 from official store Trezor.io and when UPS deliverd the package it

was opened and i think the customs who did it however only the first

security seal was opened and the seal of the device itself on usb port was safe
as you see in the pictures it it safe to use the device ?

here some photos for the package and the device seals

https://ibb.co/mbD5Kzc
https://ibb.co/2PgBp7v
https://ibb.co/VtdnB3n
https://ibb.co/z67DGQw

After i contacted trezor support here their response
https://ibb.co/pdxXdHV

They offered sending me a new device in exchange of destroying the current one and taking video proof for that

but since im living on third world country and customs usually opening packages
they may do it again with the new device (Break the seal)
also my coutry is against crypto and considered illegal i gambled and got lucky this time to not get seized but who
know what may happen next time Undecided

Topic: Trezor package opened by customs (Read 279 times)