Trezor has reduced its reseller network by about 80% after discovering seed-stealing hardware implants in three Safe 5 wallets sold through CryptoBilis. The company also released a firmware update on November 11 to prevent the implants from capturing sensitive wallet information.
The investigation covered devices purchased between August and September 2026. Trezor identified three compromised wallets among 48 customers who contacted the company following its initial warning in October. None of the affected customers has reported losing funds.
Trezor Uncovers How Hardware Implants Stole Recovery Phrases
Trezor found an additional circuit board hidden between the wallet’s main board and screen. The implant secretly recorded everything displayed, including users’ recovery phrases and passphrases.
Related: South Korea Eyes Preventive Crypto Freezes When Exchanges Suspect Hacking
The implant encrypted the stolen details before sending them to the attackers’ servers through a mobile network. When no connection was available, it kept the data and sent it once the network became available again.
Firmware Update and Reseller Restrictions
Trezor’s firmware version 2.13.1 prevents the identified implants from capturing sensitive wallet information. However, affected customers must transfer their funds to newly generated wallets using fresh recovery phrases.
The company also introduced stricter reseller requirements covering device sourcing, storage and handling. Trezor reported no evidence of tampering in devices sold through other resellers or in its other wallet models.
Related: Unocoin Suspends Logins After Server Breach: Are Customer Funds Safe?
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
