Trezor Confirms Crypto-Stealing Implants in Three Wallets, Releases Fix
Trezor said a firmware update blocks the implants, while 48 CryptoBilis buyers contacted the company after its October warning.
- On Thursday, November 12, hardware wallet maker Trezor confirmed that three Safe 5 devices purchased from CryptoBilis contained unauthorized hardware implants designed to steal wallet recovery phrases.
- Following reports of tampered Ledger wallets sold through the same reseller, Trezor removed CryptoBilis as an authorized partner on October 9 and subsequently reduced its global reseller network by approximately 80%.
- Engineers found an extra circuit board installed between the device's main board and screen, transmitting stolen data over mobile networks. Firmware version 2.13.1, released November 11, prevents the implant's trigger from functioning.
- Forty-Eight customers have contacted Trezor for assistance since its October warning. The company offers replacement devices to anyone who purchased from CryptoBilis since March 2026 and advises moving cryptocurrency to a new wallet.
- Remaining reseller partners must now follow stricter handling requirements governing device sourcing and storage. Trezor warns customers to avoid scammers impersonating support staff, emphasizing that "real protection comes from layers working together, starting with buying from a trusted source.
28 Articles
28 Articles
Trezor cuts reseller network 80% after finding wallet implants
Trezor has cut its reseller network by roughly 80% and released a firmware update after finding hardware implants in three Safe 5 wallets purchased from former reseller CryptoBilis. Trezor’s Nov. 12 investigation update said customers should still move their cryptocurrency…
BleepingComputer
Trezor confirms crypto-stealing implants in three wallets, releases fix
Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers over cellular networks. [...]
Trezor Confirms Three Implants in 48 Safe 5 Devices and Cuts 80% of Its Resellers
A Trezor Safe 5 bought from the Southeast Asian reseller CryptoBilis carried a hardware implant that copied what appeared on its screen, including the recovery phrase. On 12 November the company said its lab had confirmed the modification and that two more units among 48 customer devices showed the same board. The finding, published in Trezor’s investigation update, turns a single credible report into a confirmed supply-chain compromise and narr…
Crypto Industry Challenges Illinois Transaction Tax as Trezor Cuts Reseller Network by 80% Following Wallet Security Scandal
The cryptocurrency industry is facing two significant challenges involving regulatory uncertainty and cybersecurity concerns, as industry participants challenge Illinois’ proposed crypto transaction tax in court While hardware wallet manufacturer Trezor dramatically reduces its reseller network after discovering seed-stealing implants in its Safe 5 wallets. Although the developments involve different aspects of the digital asset ecosystem, […]
Trezor Cuts 80% of Resellers After Three Safe 5 Implants
BitcoinWorld Trezor Cuts 80% of Resellers After Three Safe 5 Implants Trezor confirmed on Nov. 12, 2026 that three Safe 5 hardware wallets sold by former reseller CryptoBilis contained hardware implants, and the company has since cut its reseller… This post Trezor Cuts 80% of Resellers After Three Safe 5 Implants first appeared on BitcoinWorld.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
