Please report suspected security vulnerabilities in private to security@satoshilabs.com. Our guidance on this topic can be found at our website and list of past issues at GitHub.

Thank you for your cooperation in making Trezor more secure.