Hardware wallet maker Trezor is treating a single customer report of a hardware implant in one of its devices as credible, even though it has not yet had the unit in hand, the company said on X on Friday. The device, a Trezor Safe 5, was bought in August 2026 from CryptoBilis, a reseller Trezor cut ties with earlier this month.
The customer flagged the device through Trezor’s responsible disclosure program. Trezor wrote that it had not received the device, but that “based on the customer’s description, we’re treating it as credible” and sharing it so buyers can secure their funds. Its security team will look at the unit once it arrives. The company also said, “No CryptoBilis buyer has reported a loss of funds to us.”
Get Unchained’s crypto news in your inbox with the free Unchained Daily newsletter.
What Trezor Has Checked So Far
Trezor removed CryptoBilis as a reseller on Oct. 9, following reports that tampered Ledger devices had been sold through it. Since then, Trezor has been inspecting its own devices that CryptoBilis customers sent in, and it said it “found no signs of tampering on any of the four devices we’ve received so far.”
The implant described in the report is an added circuit board with a cellular module, according to a Trezor blog post. It captures what the wallet’s screen displays, including the recovery phrase, and transmits that over a mobile network once the device is plugged in. Trezor said the setup appears to work like the implants found in Ledger wallets. None of this has been confirmed by an inspection of the device.
Guidance for CryptoBilis Buyers
Trezor asked anyone who bought one of its wallets from CryptoBilis from March 2026 onward to move their funds to a new wallet with a fresh seed, and not to use the old seed again on any device or app. Owners without a second secure hardware wallet can temporarily hold funds on a software wallet or an exchange they know, the company said. Anyone with an unopened device should not set it up. Affected customers can keep the CryptoBilis unit and contact Trezor Support for a replacement. Trezor credited the customer and the security group SEAL 911 for their help with the response.
Separately, an onchain analyst tallied more than $86 million reportedly drained from Ledger users across several blockchains, and the hardware wallet provider has said its confirmed cases all trace back to CryptoBilis. MediaMarkt Saturn pulled Ledger wallets from its shelves after a customer in Germany reported an implant.
Related Listen: Ledger Wallets Were Drained of $100 Million. Is Self-Custody Still Safe?
The post Trezor Treats One Report of an Implanted CryptoBilis Safe 5 as Credible Before Examining It appeared first on Unchained.
Powered by WPeMatico
