Trezor warns of suspected hardware implant in Safe 5 wallets sold by reseller CryptoBilis

Trezor reports credible but unverified claims of a supply-chain hardware implant in a Trezor Safe 5 bought from the reseller CryptoBilis. The customer says an extra board exfiltrates the recovery phrase over a mobile network. Trezor has not yet inspected the device, and the articles give no CVE, firmware detail or attribution. Defenders and users should follow Trezor's guidance: anyone who bought from CryptoBilis since March 2026 should create a new wallet with a fresh recovery phrase and move funds across, and should treat devices from that channel as untrusted.

For security analysts · Written by AI from 2 sources · Wrong?