fix(core): remove external tamper trigger
What the developer wrote
Authored by tychovrahe
fix(core): remove external tamper trigger
[no changelog]
What changed, and why it matters
This commit removes a feature in the Trezor hardware wallet's security monitor that enabled an external tamper-detection trigger in production builds. Tamper detection is meant to wipe secrets if someone physically attacks the device. The change suggests the external trigger was either unreliable, risky, or not ready for production, but the commit message gives no details. Without more context, we cannot tell whether this fixes an active security flaw or is just a defensive cleanup.
Treat as a low-confidence security-related hardening change. Review the tamper_external_enable() implementation and any related internal issue tracker entries to determine whether this was a vulnerability fix. If it was, request a security advisory or CVE from the vendor. End users do not need to take action unless the vendor later confirms a security issue.
Security signals we found
Removal of production-only tamper-trigger enablement
Change is in secmon (security monitor) firmware component
No changelog entry and terse commit message
No CVE, advisory, or researcher attribution in commit
Evidence from the diff
In core/embed/projects/secmon/main.c, the call to tamper_external_enable() inside the PRODUCTION conditional block is removed. The surrounding USE_TAMPER and tamper_init() code remains. The diff alone does not reveal what tamper_external_enable() does, why it was enabled only in production, or what vulnerability or failure mode prompted its removal. The commit message is minimal and there are no supplied references.
Changed components
core/embed/projects/secmon/main.cTrezor security monitor (secmon)External tamper detection subsystemInspect captured patch +0 / −3
diff --git a/core/embed/projects/secmon/main.c b/core/embed/projects/secmon/main.c
index 3ed28e690..0e8c0b1dc 100644
--- a/core/embed/projects/secmon/main.c
+++ b/core/embed/projects/secmon/main.c
@@ -64,9 +64,6 @@ static void drivers_init(void) {
#ifdef USE_TAMPER
tamper_init();
-#if PRODUCTION
- tamper_external_enable();
-#endif
#endif
random_delays_init();
Why this scored 57/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.