chore: update embedded binaries for T3W1
What changed, and why it matters
This commit updates pre-built binary files (bootloader and security monitor) for the T3W1 hardware model, along with the matching bootloader hash. The change is presented as a routine chore with no changelog entry. There is no visible source diff or description of what changed inside the binaries, and no security relevance is stated.
No immediate security action is indicated. If reviewing for supply-chain assurance, verify the new bootloader and secmon binaries against the published hashes and the vendor's release notes for version 2.1.15.0. Treat this as a routine embedded-binary update unless independent evidence links it to a security fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit replaces three binary artifacts for the Trezor T3W1 model: bootloader_T3W1.bin (version 2.1.14.0 → 2.1.15.0), secmon.bin, and secmon_api.o, plus the corresponding SHA-256 hashes in bootloader_hashes.h. The actual code changes inside the binaries are opaque because only binary diffs are provided. No source-level security fix, vulnerability description, or advisory is included in the commit or supplied references.
Changed components
core/embed/models/T3W1/bootloaders/bootloader_T3W1.bincore/embed/models/T3W1/bootloaders/bootloader_hashes.hcore/embed/models/T3W1/secmon/secmon.binInspect captured patch +3 / −3
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin b/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin
index 0c2ab8d6..35662054 100644
Binary files a/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin and b/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin differ
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
index 6d05e619..515fb84b 100644
--- a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
+++ b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
@@ -4,9 +4,9 @@
// Auto-generated file, do not edit.
// clang-format off
-// bootloader_T3W1.bin version 2.1.14.0
-#define BOOTLOADER_T3W1_00 {0x40, 0x27, 0xda, 0xbc, 0x7c, 0x6b, 0x31, 0x02, 0x32, 0xef, 0x77, 0x65, 0x89, 0x2c, 0xc6, 0x83, 0x72, 0x60, 0x1f, 0x88, 0xc9, 0xc0, 0x96, 0xb3, 0x4e, 0x10, 0x64, 0x05, 0x26, 0xa5, 0xbd, 0x6a}
-#define BOOTLOADER_T3W1_FF {0x40, 0x27, 0xda, 0xbc, 0x7c, 0x6b, 0x31, 0x02, 0x32, 0xef, 0x77, 0x65, 0x89, 0x2c, 0xc6, 0x83, 0x72, 0x60, 0x1f, 0x88, 0xc9, 0xc0, 0x96, 0xb3, 0x4e, 0x10, 0x64, 0x05, 0x26, 0xa5, 0xbd, 0x6a}
+// bootloader_T3W1.bin version 2.1.15.0
+#define BOOTLOADER_T3W1_00 {0xa1, 0x9a, 0x99, 0xec, 0x7e, 0x3b, 0xf2, 0x5b, 0x05, 0x46, 0xaf, 0x32, 0xf3, 0x86, 0xa1, 0x96, 0x03, 0x83, 0xed, 0x8b, 0x83, 0x05, 0x4c, 0xdd, 0x67, 0x47, 0x7c, 0x87, 0x51, 0x45, 0x46, 0xb0}
+#define BOOTLOADER_T3W1_FF {0xa1, 0x9a, 0x99, 0xec, 0x7e, 0x3b, 0xf2, 0x5b, 0x05, 0x46, 0xaf, 0x32, 0xf3, 0x86, 0xa1, 0x96, 0x03, 0x83, 0xed, 0x8b, 0x83, 0x05, 0x4c, 0xdd, 0x67, 0x47, 0x7c, 0x87, 0x51, 0x45, 0x46, 0xb0}
// bootloader_T3W1_qa.bin version 2.1.15.0
#define BOOTLOADER_T3W1_QA_00 {0x13, 0x24, 0x8a, 0xd9, 0xb1, 0xbd, 0x94, 0xe9, 0x06, 0x4c, 0x83, 0x3a, 0xea, 0xec, 0x19, 0xf7, 0x7d, 0x6a, 0x39, 0x7d, 0x44, 0xf4, 0x1b, 0x2f, 0x69, 0x5a, 0x8c, 0xf0, 0xad, 0x2c, 0x1d, 0x22}
diff --git a/core/embed/models/T3W1/secmon/secmon.bin b/core/embed/models/T3W1/secmon/secmon.bin
index 8ce0fccb..237c95ce 100644
Binary files a/core/embed/models/T3W1/secmon/secmon.bin and b/core/embed/models/T3W1/secmon/secmon.bin differ
Why this scored 0/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.