Trezor warns of suspected hardware implant in CryptoBilis wallet

Trezor has warned customers who purchased hardware wallets from former reseller CryptoBilis to move their funds after receiving a report of a suspected malicious implant inside a Trezor Safe 5 device. Summary Trezor has warned customers who purchased hardware wallets from CryptoBilis since March 2026 to move their funds after receiving a report of a suspected implant in a Safe 5 device. The suspected implant reportedly contains an additional circuit board and cellular module capable of capturing recovery phrases displayed on the wallet and transmitting them over a mobile network. Trezor has not yet physically examined the reported device, but said the information provided by the customer was credible enough to issue a warning. No customer losses have been reported to the company. CryptoBilis was removed as an authorized Trezor reseller on October 9 after Ledger confirmed that some hardware wallets sold through the same reseller had been physically tampered with. Trezor has advised affected customers to create new wallets with new recovery phrases and is offering replacement devices or vouchers to eligible buyers. According to an October 30 announcement, the company received a secur...