Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers via cellular networks.
The findings follow an investigation into a suspected hardware implant first reported in October, when a customer discovered an unauthorized circuit board inside a Trezor Safe 5 purchased from Indonesian reseller CryptoBilis.
At the time, Trezor had not received the device for review and could not confirm the implant’s capabilities.
In a new survey updateThe company claims to have examined the original device in its laboratory and identified two other compromised wallets using photographs submitted by their owners.
The three compromised devices were purchased from CryptoBilis between August 20 and September 23, 2026.
Trezor claims that 48 CryptoBilis customers contacted the company following its October warning, with the devices being examined in its laboratory or through photographs of their internal components.
The company also inspected devices from other dealers in the area and found no evidence of tampering.
So far, confirmed implants have been limited to Safe 5 devices sold through CryptoBilis, and no affected customers have reported losing funds.
Firmware update blocks hardware implants
Trezor claims that its engineers analyzed the implant’s firmware and confirmed that the malicious hardware can capture sensitive information displayed or typed on the wallet’s screen.
The implant consists of an additional circuit board installed between the Safe 5’s main board and screen, allowing it to monitor screen activity without modifying the device’s legitimate firmware or secure element.
When wallet recovery words appear on the screen, either when creating a new wallet backup or restoring an existing wallet, the implant recovers them.
It can also capture passphrases displayed on the screen, encrypt the stolen information and transmit it over a mobile network to a server controlled by an attacker.
If a connection is not available, the implant retains the captured data and repeatedly attempts to transmit it until it succeeds.
These reported implants follow previously confirmed hardware implants discovered in Ledger devices sold through CryptoBilis, which have been linked to cryptocurrency thefts.
On November 11, Trezor released firmware version 2.13.1, which includes protections preventing implants from capturing information.
“Our latest firmware update 2.13.1, released on November 11, includes protection that prevents the implants we found from capturing anything on devices running it, rendering the current batch of implants useless,” Trezor said.
However, the company warns that the update cannot protect wallet recovery phrases that may have already been captured before it was installed.
Although no Trezor customers have reported theft of funds, those who purchased Trezor devices from CryptoBilis are still advised to transfer their cryptocurrency to a newly created wallet using a new recovery phrase.
Source: Trezor
Trezor cuts its reseller network by 80%
As a result of these supply chain attacks, Trezor reduced its global reseller network by approximately 80%, significantly reducing the number of third-party resellers of its hardware wallets.
The company previously announced plans to reduce its reseller network in October, following reports of compromised Ledger wallets sold through CryptoBilis. This was before Trezor also learned of the existence of implants in his devices.
Trezor says the removed resellers were trustworthy and posed no threat, but did not meet stricter supply chain security requirements.
Remaining partners must follow stricter controls governing how devices are purchased, stored and accessed.
The company is offering replacement devices to anyone who has purchased a Trezor wallet from CryptoBilis since March 2026, including customers whose devices have not been confirmed to be compromised.
At this time, the company says it has found no evidence of devices being planted with other resellers and has not received any reports of funds being stolen through compromised Safe 5 wallets.
Adaptive Security’s AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.
See what’s happening with a 14-day read-only scan of Microsoft 365 or Google Workspace, without MX modifications.
