Trezor confirmed that three Trezor Safe 5 hardware wallets contained malicious hardware implants, according to a November 12 post on its blog. All three were bought from CryptoBilis, a former reseller in Southeast Asia, between August 20 and September 23, either directly or through its Tokopedia and Shopee stores. Trezor said it found no implants in other models.
Bitcoin.com reported that Trezor examined the first reported unit in its lab, identified two more from owners’ photos, and that 48 customers had contacted the company. The implant sits between the screen and the main board, leaving the firmware and Secure Element unchanged. Per Trezor’s account, it copies displayed data such as recovery phrases and passphrases, and sends it over a mobile network. Trezor said it has received no reports of customer funds being lost.
Trezor released firmware 2.13.1 on November 11, which it said stops the identified implants from capturing data. It does not protect a recovery phrase captured earlier. Trezor advised CryptoBilis buyers to move funds to a new wallet with a new recovery phrase, keep the device and not set it up until support advises, and use only official Trezor Support. Replacements cover CryptoBilis purchases from March 2026 onward.
Protos reported that Trezor also cut its reseller network by about 80% under stricter sourcing, storage and access rules, describing the removed resellers as trustworthy. Trezor had first warned of a suspected implant on October 30. All findings are Trezor’s own.
Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!
Sources:
Trezor: Our CryptoBilis investigation, what we found and what we’ve changed
Bitcoin.com News: Trezor Confirms Spy Implants in 3 Hardware Wallets, Cuts Resellers by 80%
Protos: Trezor cuts reseller network by 80% after finding more spy implants
⚠️ RISK WARNING & AI DISCLOSURE
- This information is generated by Artificial Intelligence (AI) and complex algorithms. While advanced, these systems can contain errors or inaccuracies and are for educational purposes only.
- Technical analysis provides no guarantees; this information is purely informative.
- All discussed scenarios are hypothetical and do not constitute predictions or expectations.
- Past performance is not an indicator of future results.
- This is not financial advice and is not intended as a call-to-action for the reader.
- No implicit direction is claimed, and no specific behavior of market participants is suggested.