CVE-2025-69893 describes a side-channel vulnerability in the BIP-39 mnemonic processing of Trezor One, Trezor T, and Trezor Safe hardware wallets specifically in versions 1.13.0 and 1.14.0. The vulnerability is due to the BIP-39 standard's implementation causing non-constant time execution and distinct branching during word searching. An attacker with physical access during the initial setup phase can capture a single side-channel trace and use profiling-based deep learning side-channel analysis (DL-SCA) to recover the mnemonic code, enabling theft of assets. The issue has been addressed with a patch.

Successful exploitation allows an attacker with physical access during the initial setup phase to recover the wallet's mnemonic phrase, leading to complete compromise of the wallet's assets. The vulnerability does not affect confidentiality beyond the mnemonic recovery, nor does it impact integrity or availability directly. No known exploits are reported in the wild.

The vulnerability has been patched by the vendor. Users should update their Trezor hardware wallets to versions later than 1.14.0 where this issue is fixed. Since this is a hardware wallet vulnerability requiring physical access during setup, updating firmware is the primary mitigation. Patch status is not explicitly stated but the description confirms the issue was patched; users should verify with the vendor for the official fixed versions.