A secure wallet, a compromised seller: What CryptoBilis exposed

Ledger’s confirmed implant findings and Trezor’s subsequent warning concern devices bought through the same reseller. The investigations put the route from manufacturer to customer alongside the security of the chip inside the wallet. Summary Trezor disclosed a suspected implant in 1 Safe 5 bought through CryptoBilis in August. Its October 30 notice said the reported device had not yet reached its laboratory. Ledger’s October 13 findings described an implant capturing 24-word recovery phrases through the screen connection. Bitquery’s October 16 investigation counted $102 million across 335 wallets on 6 blockchains. Trezor’s precautionary replacement offer covers CryptoBilis purchases from March 2026 onwards. Trezor has warned customers about a suspected implant in 1 Safe 5 sold through CryptoBilis, extending the hardware wallet investigation beyond the Ledger devices previously linked to thefts. Trezor’s October 30 notice says the company received photographs and interviewed the buyer by video, but had not received the device for laboratory examination. It treated the account as credible enough to warn other customers before completing that work. The company said no CryptoBilis buy...