Tuesday 3 November
Global

Your region, kept on this device.

Trezor warns some Safe 5 wallets sold by CryptoBilis may hide a seed-stealing implant

Severity
High
Sources
1

has warned that units sold by reseller may contain a hidden implant that captures the recovery phrase (seed). Trezor says the risk applies to devices bought from CryptoBilis from March 2026 onwards. The reseller is linked to recent Ledger wallet drains. No CVE is cited, and the full advisory, including any affected firmware or remediation steps, was not in the excerpt.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Check whether your Trezor was bought from CryptoBilis, particularly from March 2026 onwards.
  2. Follow Trezor's full warning and guidance for affected devices.
  3. Do not enter your recovery phrase into a device you suspect may be compromised.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Mon 2 NovemberTrezor warns some of its wallets may hide a seed-stealing implantHelp Net Security

Who reported · 1 outlet

Help Net Security

Who and what is in it

Report a problem