Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[Desktop] wallet not using latest version of Trezor Connect

See original GitHub issue

Description

brave://wallet still uses v7 of Trezor Connect and not the suggested and more secure v8.

Steps to Reproduce

Setup a Trezor hardware wallet with latest firmware and connect it to your computer
Open brave://wallet
In your accounts list, click Connect Hardware Wallet
Select Trezor in and click Connect

Actual result:

This opens https://connect.trezor.io/7/popup.html which is not the latest version

Expected result:

I expect to be redirected to https://connect.trezor.io/8/popup.html which is the latest version

Reproduces how often:

Every single time

Brave version (brave://version info)

Brave | 1.10.97 Chromium: 83.0.4103.116 (Official Build) (64-bit)
-- | --
Revision | 8f0c18b4dca9b6699eb629be0f51810c24fb6428-refs/branch-heads/4103@{#716}
OS | Linux

Other Additional Information:

Does the issue resolve itself when disabling Brave Shields? No
Does the issue resolve itself when disabling Brave Rewards? No
Is the issue reproducible on the latest version of Chrome? Not applicable as Chrome does not ship with an integrated wallet but this is already resolved in the latest version of MyEtherWallet and MyCrypto which both redirect to v8.

Issue Analytics

State:
Created 3 years ago
Comments:18 (9 by maintainers)

Top GitHub Comments

2reactions

bitofitcommented, Apr 28, 2021

@srirambv @ryanml can this be re-visited? Requiring passphrases to be typed into the computer vs on hardware device is a serious security concern that should be addressed ASAP.

1reaction

bitofitcommented, Apr 8, 2021