Trezor Safe 5 Review: The Open-Source Case Against Ledger
How we reviewed this: from the manufacturer’s own documentation and published security research.
Trezor's pitch is simple: a secure element — the tamper-resistant chip that holds your keys — you are actually allowed to inspect. Here is what that buys a Canadian owner, what it does not, and why the cheaper Safe 5 currently has a cleaner security record than the newer Safe 7.
By the CryptoNorth Team
What the Trezor Safe 5 Is
The Safe 5 is Trezor's colour-touchscreen hardware wallet: a device that generates and stores your private keys on a dedicated chip, so they never touch an internet-connected computer. It has a 1.54-inch 240×240 display behind Gorilla Glass 3, haptic feedback, USB-C, and support for over 1,000 coins and tokens through Trezor Suite[1].
It also supports Shamir Backup, which splits your recovery seed into multiple shares where only a threshold number are needed to restore. If you are worried about a single piece of paper in a single location, that is a genuinely useful option Ledger does not offer in the same form[2].
The Open-Source Argument
This is the whole reason to choose Trezor over Ledger, and it is worth understanding properly rather than treating “open source” as a slogan.
- EAL6+ secure element: a higher certification tier than the EAL5+ chip in the Ledger Nano X — though the cheaper Ledger Nano S Plus uses an EAL6+ chip too, so certification alone does not separate them[1]
- NDA-free: the chip's documentation is not locked behind a non-disclosure agreement, so independent researchers can actually examine how it works[1]
- Open firmware: the code running on the device can be read and audited by anyone
The honest counterpoint, which Trezor's marketing will not tell you: open source means vulnerabilities become public knowledge the moment they are found, sometimes before a fix ships[2]. Most security researchers consider that a net positive over the long run. It is still a real trade-off, not a free win.
Security Incidents: What Actually Happened
Two incidents matter as of August 2026, and neither involves anyone's crypto being stolen from a Trezor device.
Trezor's order-fulfilment partner ShipMonk was breached, exposing names, email addresses, phone numbers and shipping addresses for roughly 14,000 customers. Trezor's own systems, firmware and devices were not compromised, and no seed phrases — the recovery words that control your coins — or funds were exposed[3].
Ledger's security team, Ledger Donjon, found that the TROPIC01 chip can be glitched via laser fault injection to extract one of three PIN-protection secrets. It affects the Safe 7, not the Safe 5. It cannot be fixed remotely because it is a hardware flaw, though exploiting it needs physical possession plus specialist equipment, and it defeats only one of three protection layers[4].
The ShipMonk breach covered customers in seven countries — the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal. Canada was not among them[3]. That is reassuring but not a guarantee: treat any unexpected letter or email referencing your Trezor purchase as hostile regardless.
The real risk from address leaks: criminals have historically used breached hardware-wallet customer lists to mail counterfeit devices and extortion letters, with past demands in the $700–$1,000 range[3]. Trezor will never post you a replacement device you did not order, and will never ask for your recovery seed. Initialise every device yourself, from the box, and never use a pre-filled seed card.
Safe 5 or Safe 7?
Trezor now sells a newer flagship, and the obvious assumption — newer is safer — does not currently hold.
EAL6+ secure element with no disclosed vulnerability. Colour touchscreen, 1,000+ assets, Shamir Backup.
Dual secure elements, quantum-resistant claims, Bluetooth, water and dust resistance — but one of those chips is the TROPIC01[6].
Our read: unless you specifically want Bluetooth or the ruggedised build, the Safe 5 is the better buy right now. It is CAD $190 cheaper and its secure element has no publicly disclosed flaw. The Safe 7's headline feature is an openly auditable chip — and the first thing that audit produced was a vulnerability report from a competitor's lab. That is open source working exactly as intended, but it is not an argument for paying more today.
Trezor Safe 5 vs Ledger Nano X
These are the two devices most Canadians actually choose between. Neither has ever had its secure element remotely compromised.
- Choose the Safe 5 if auditability matters to you, you want Shamir Backup, or you prefer a touchscreen
- Choose the Nano X if you need an asset Trezor Suite does not cover, or want Bluetooth for mobile use
- Price: the Nano X is CAD $119
- Track record: both companies have leaked customer contact data — Ledger from its own e-commerce database in 2020 and via a checkout partner in 2026, Trezor via a shipping provider in 2026. Neither has lost customer funds from the device itself
Pros and Cons
Frequently Asked Questions
If you are in Canada, almost certainly not — the ShipMonk breach covered the US, UK, Sweden, Colombia, Brazil, Italy and Portugal. No devices, firmware or seed phrases were compromised in any country; what leaked was contact and shipping information. Stay alert for phishing letters or emails that quote your real address.
On paper the Safe 5 has the higher certification, EAL6+ against EAL5+, and its chip documentation is not under NDA so it can be audited. In practice neither device has ever had its secure element remotely compromised. The meaningful difference is philosophical: Trezor lets you verify their claims, Ledger asks you to trust them.
Not on security grounds. The Safe 7 uses the TROPIC01 chip, which has a disclosed laser fault injection vulnerability that cannot be patched remotely. It is a difficult attack requiring physical access and specialist equipment, and it breaks only one of three PIN protections — but the Safe 5 has no equivalent disclosed flaw and costs CAD $190 less.
It matters if a single hidden seed card is your only backup, which is the most common way people lose crypto. Shamir splits the seed into shares — for example five, any three of which restore the wallet — so one lost or destroyed share is survivable. It adds complexity, so it is worth it for meaningful balances rather than a first small purchase.
This review is for informational purposes only and is not financial or security advice. Hardware wallet safety depends far more on how you set the device up than on which model you buy — always purchase directly from the manufacturer or an authorised reseller, initialise the device yourself, generate your own seed, and never enter that seed anywhere except the device screen. Prices change and vary with exchange rates and duties. Some links on this page may be affiliate links.
Buy new, direct from Trezor. Never buy a hardware wallet second-hand or from a marketplace — a tampered device looks identical to a genuine one.
