In the field of cryptocurrency storage, trust and transparency have always been the deciding factors that separate reliable hardware wallets from ordinary ones. Trezor, a name long associated with open-source hardware wallets, has once again taken a bold step forward with the launch of the Trezor Safe 7 on October 21, 2025.
What makes this launch special is not just a new device, but the debut of the TROPIC01 chip, a secure element that represents a new philosophy in hardware design. Developed by Tropic Square, a subsidiary of SatoshiLabs, the company behind Trezor, this chip brings a level of transparency and public auditability that the cryptocurrency community has demanded for years. Priced at $249 for pre-order, the Safe 7 combines high-end design, dual-chip security, and open architecture to address the long-standing concerns about closed, proprietary chips used in many competing wallets.
The TROPIC01 chip stands at the centre of Trezor’s latest innovation. It is the world’s first open and auditable secure element, meaning that every layer of its design, from schematics to firmware, can be inspected, tested, and verified by anyone. Traditional secure elements, used in most hardware wallets, are built by companies that restrict access to their internal designs through non-disclosure agreements. Users and researchers are expected to trust these chips without any way to confirm what goes on inside them. TROPIC01 challenges this approach by offering complete openness, giving the global security community the freedom to test it for weaknesses and help improve it continuously.
This open architecture removes the idea of a “black box” in hardware security. Users can now have confidence that their private keys and sensitive information are protected by a system they can examine and understand, not one that depends on blind faith. The chip’s full documentation, source code, and design files are available for independent audits and public review, which helps the crypto world build collective trust through transparency.
Features and Security
TROPIC01 comes with several hardware-accelerated cryptographic functions, including elliptic curve cryptography (ECC) and SHA-256 hashing, both of which are vital for blockchain transactions. The chip also supports future post-quantum algorithms through firmware updates, making it capable of adapting to the growing concern over quantum computing’s potential to break existing encryption methods.
To counter physical tampering and cyber-attacks, TROPIC01 incorporates protective mechanisms against side-channel attacks, fault injections, and other manipulation attempts. It also introduces one-time programmable (OTP) hardware slots for PIN verification. Every failed PIN attempt permanently uses one of these physical slots, meaning repeated guessing or brute-force attacks will damage the chip and lock the attacker out permanently. This feature makes resetting or bypassing PIN protection through software completely impossible.
The chip has achieved EAL5+ equivalent standards and has already received recognition, such as the “Idea of the Year (Nápad Roku 2025)” award in the Czech Republic and two honours at Embedded World 2025. While full certification is still underway, these acknowledgements confirm that the chip has achieved a strong balance between open design and real-world reliability.
TROPIC01 represents more than technical progress; it reflects a belief that security grows stronger through public verification, not secrecy. As Trezor’s CTO, Tomáš Sušanka explained during the launch, “For too long, secure elements have been opaque black boxes. TROPIC01 fixes this.” By manufacturing the chip through its own company, Tropic Square, Trezor ensures complete supply chain control, avoiding hidden components or third-party interference.
The Trezor Safe 7 is the first hardware wallet powered by the TROPIC01 chip, and it introduces a range of practical improvements aimed at both security-conscious users and those who prefer convenience. Unveiled at the “Trustless by Design” event in Prague, the Safe 7 marks the seventh major iteration in Trezor’s hardware wallet series. It is available in two versions: a full version supporting over 9,000 cryptocurrencies and a Bitcoin-only edition for users who prefer a simplified, single-asset wallet.
The Safe 7’s body is crafted from anodised aluminium, giving it a durable yet lightweight structure. The design is both stylish and functional, with IP54 resistance against dust and splashes. Measuring roughly 60x30x6mm, it fits easily in a pocket while offering a solid build suitable for daily use. The wallet features a 2.5-inch Gorilla Glass touchscreen, which is about 62% larger than that of the previous Safe 5 model, allowing for clear, detailed viewing of transactions before signing. It also includes haptic feedback, making navigation more intuitive.
For connectivity, Trezor has introduced encrypted Bluetooth Low Energy (BLE), allowing users to pair the device securely with mobile phones without needing cables. A USB-C port remains available as a fallback option. There is no Wi-Fi feature, a deliberate choice to reduce the attack surface and keep all operations as isolated as possible. The wallet runs on a LiFePO₄ battery, known for its long lifespan and stability. It can retain charge for extended periods, even when stored for years.
Software, Firmware, and Functionality
The Safe 7 runs entirely on open-source firmware and integrates with Trezor Suite, the company’s software for desktop and mobile platforms. Users can manage digital assets, check balances, and sign transactions securely, with all private key operations remaining inside the device. The clear-signing interface on the touchscreen helps users verify exactly what they are approving, reducing the risk of phishing or hidden transaction manipulation.
The wallet also includes Shamir Backup, a recovery method that splits the seed phrase into multiple shares. These can be stored separately, ensuring that losing one or two pieces will not compromise the entire wallet. The device’s bootloader is designed to support post-quantum upgrades, meaning that when new cryptographic algorithms are introduced to resist quantum-based attacks, they can be integrated through firmware updates without changing the physical hardware.
One of the Safe 7’s most important features is its dual-chip architecture. The TROPIC01 serves as the main secure element responsible for encryption, PIN enforcement, and verifying the authenticity of each Trezor device. Alongside it, a secondary EAL6+ certified chip manages signing operations, adding another layer of defence. This structure ensures that even if one component were compromised, the other would prevent a full system breach.
PIN protection is enforced by hardware, with physical fuses preventing brute-force attacks. Once a PIN attempt counter is exhausted, the chip becomes unusable, eliminating the risk of automated guessing. The combination of two independent chips, one open-source and one conventionally certified, gives users both transparency and compliance with international security standards.
The crypto community has shown strong interest in the Safe 7, praising its openness and design. Early batches of pre-orders sold out within hours of announcement. Discussions on forums and social media reflect appreciation for the return to open hardware principles, though some experts remain cautious about its claims of quantum resistance. Many have acknowledged that while the device is not yet fully quantum-proof, its architecture is prepared for future updates that will make it more resilient once post-quantum standards are ready.
