Trezor warns of suspected hardware implant in Safe 5 wallet sold via CryptoBilis

Trezor's notice covers a suspected supply-chain implant in one Safe 5: an interposer board on the display link with a cellular module and antenna, allegedly exfiltrating the seed shown during setup. No CVE is cited and the device has not yet been lab tested. The March 2026 cutoff for CryptoBilis purchases is a precaution, not proof of wider tampering. Trezor has not linked this to the Ledger tampering also traced to CryptoBilis. Affected users should leave unused devices unused, never enter an existing seed, create a fresh wallet with a new seed on a trusted device, transfer funds after checking the full receiving address, and keep the original device. Expect phishing that exploits the incident; support never asks for a recovery phrase.

For security analysts · Written by AI from 2 sources · Wrong?