Trezer suite lite showing multiple addresses when i only did one transaction.

[Johnds1]

My Trezor Safe 5 is brand new.  I sent a btc transaction from coinbase to the Trezor.  However when I open trezor suite lite and view the transaction there is a "from" and "to" section.  When i click from, it shows the address it came from(coinbase).  When I click "to", it shows the address that coinbase sent to(my trezor wallet), but whats concerning me is it also shows 26 other btc receiving addresses.  Why?  Is my device compromised?  This is the only transaction Ive done so far.  Also, is it normal to still show receiving/pemding after 40 minutes?

[sokani]

but whats concerning me is it also shows 26 other btc receiving addresses.  Why?  Is my device compromised?  This is the only transaction Ive done so far.

No, your device is not compromised. When you created a new wallet, Trezor automatically generated the bunch of receiving addresses, and there's nothing to worry about. They are part of the wallet, and the purpose of this feature is to enhance your privacy. You can use any of them to receive your coin.

Also, is it normal to still show receiving/pemding after 40 minutes

Yes, but it depends on the gas fee you used. However, the mempool is decongested right now and fees are low. If you the fee rate with medium or high priority, you should have atleast one confirmation.

EDITED: I misunderstood the question . The user below me is right.

[Knight Hider]

My Trezor Safe 5 is brand new.  I sent a btc transaction from coinbase to the Trezor.  However when I open trezor suite lite and view the transaction there is a "from" and "to" section.  When i click from, it shows the address it came from(coinbase).  When I click "to", it shows the address that coinbase sent to(my trezor wallet), but whats concerning me is it also shows 26 other btc receiving addresses.  Why?  Is my device compromised?  This is the only transaction Ive done so far.  Also, is it normal to still show receiving/pemding after 40 minutes?

Don't listen to sokani, they're wrong.
Coinbase handles transactions in batches. You and 26 others received their withdrawal in this one transaction. This is normal. Waiting 40 minutes "pending" is normal too. Sometimes it takes longer, sometimes it is faster.

[OcTradism]

My Trezor Safe 5 is brand new.  I sent a btc transaction from coinbase to the Trezor.  However when I open trezor suite lite and view the transaction there is a "from" and "to" section.  When i click from, it shows the address it came from(coinbase).  When I click "to", it shows the address that coinbase sent to(my trezor wallet), but whats concerning me is it also shows 26 other btc receiving addresses.  Why?  Is my device compromised?  This is the only transaction Ive done so far.  Also, is it normal to still show receiving/pemding after 40 minutes?

With HD wallets (Hierarchical Deterministic Wallets) like Trezor, you can have multipler addresses in your wallet with only one wallet mnemonic seed. Learn more about HD wallets with learnmeabitcoin.com website can help you.

You need to learn another related thing: Transaction outputs and UTXOs.
https://learnmeabitcoin.com/beginners/guide/outputs/
https://learnmeabitcoin.com/technical/transaction/utxo/

It is not always to make a transaction with only 1 input and 1 output, most of time Bitcoin transactions has multiple inputs and outputs.

[Porfirii]

It's natural to have these doubts when you do your first transactions with Bitcoin, because there are some things that are quite counterintuitive.

Everything said above is right, although it is a bit mixed.

- Trezor creates several receiving addresses for you. It's a feature, not a bug, but it can be messy at first.

- Transactions in the blockchain usually have several inputs and outputs, apart from those belonging to your payment.

- Transactions can get stuck for some time, especially if the fees you paid were you low or the network is congested. This can be fixed with the "replace-by-fee" feature in some wallets.

[bitmover]

My Trezor Safe 5 is brand new.  I sent a btc transaction from coinbase to the Trezor.  However when I open trezor suite lite and view the transaction there is a "from" and "to" section.  When i click from, it shows the address it came from(coinbase).  When I click "to", it shows the address that coinbase sent to(my trezor wallet), but whats concerning me is it also shows 26 other btc receiving addresses.  Why?  Is my device compromised?  This is the only transaction Ive done so far.  Also, is it normal to still show receiving/pemding after 40 minutes?

Your addresses are mathematically derived from your seed, those words you saved in a piece of paper.

in fact,  all your addresses already existed even before you bought your wallet. What tour trezor did was to safely generate the private key to spend from those addresses.

In  mastering bitcoin you can read more.
https://github.com/bitcoinbook/bitcoinbook/blob/develop/ch05_wallets.adoc

[BitMaxz]

It looks like anyone just makes OP confused about what those inputs and outputs are.

@OP without the TXID we can't determine if those  "26 other btc receiving addresses" are yours or not since you can't send BTC from Coinbase into multiple addresses, at least based on my experience using Coinbase before. I don't know how Coinbase works nowadays.

However, these receiving addresses that include your Trezor BTC address, all of them aren't yours except the single BTC address that you pasted.
What you see under receiving might be owned by other people who withdraw at the same time, and the change is owned by Coinbase, not yours.

Meaning that under receiving, only one is yours, not all of them. That includes change and other users' receiving addresses.

Read more about "Coinbase rolls out Bitcoin transaction batching"

[tabas]

Most exchanges like Coinbase have a lot of outputs and as said by the others, batches of transactions, and it includes yours. Your only address there is yours, and the rest are the outputs, and you don't know who owns them. Do not be confused about the Trezor's feature of making new addresses and using the Trezor Suite App, the address you generate there is yours. But transactions from exchanges like Coinbase, they're not all yours; what you've used there as the 1 address is only yours.

[Johnds1]

Thanks guys.  All good.  I myself was leaning toward the fact that those addresses were other users receiving at the same time.

I switched from Ledger Nano X to Trezor Safe 5.  I feel a little better having my crypto on the Trezor, but I gotta say, I still dont like the fact that Trezor designed the device to generate a seed while plugged in.  You would think they would eliminate that worry regardless of how safe the Trezor suite is.  I dont knkw if it helped, but after I downloaded Trezor Suite, I completely disconnected from the internet, ran the setup, unplugged device, deleted the Suite, before turning wifi back on.  Also a more sophisticated packaging would have been nice along with the price, or at least a suede pouch lmao.

More importantly, who are we trusting to read and test Trezor’s open source code whenever there is an update?  Is that the proper protocol to check, when a new update comes out?  Where can we verify if we cant read code?

[tabas]

but I gotta say, I still dont like the fact that Trezor designed the device to generate a seed while plugged in.  

It's the same with the Nano devices, at least with what I know about the S old version because it's what I had before.

More importantly, who are we trusting to read and test Trezor’s open source code whenever there is an update?  Is that the proper protocol to check, when a new update comes out?  Where can we verify if we cant read code?

Check the Hardware wallets section, there are many discussions about Trezor.
Also, they have this github repository -> https://github.com/trezor

[SFR10]

More importantly, who are we trusting to read and test Trezor’s open source code whenever there is an update?  Is that the proper protocol to check, when a new update comes out?  Where can we verify if we cant read code?

WalletScrutiny is my go-to platform for checking the reproducible builds ^{[refer to the "Application build" section]}.

A couple of notes:
- Sometimes there are delays with verifying the latest releases, but you can contribute by uploading the binary file, so someone gets notified to verify it.
- A reproducible build doesn't equate to being 100% safe, but it's better than nothing.