Trezor said it received a credible report of a suspected hardware implant in a Trezor Safe 5 bought from reseller CryptoBilis in August 2026. The company has not received the device for verification, and no CryptoBilis customer has reported losing funds.
Why it matters
A suspected device implant raises a supply-chain security concern for hardware-wallet buyers. Trezor urged customers who bought devices from CryptoBilis since March 2026 to move funds to newly created wallets with new recovery seeds.
Market impact
Trezor removed CryptoBilis as a reseller on October 9 after reports of tampered Ledger devices. Four Trezor devices inspected so far showed no signs of tampering, and the investigation is ongoing.
Frequently asked questions
-
What device is involved in Trezor's suspected implant report?
The report concerns a Trezor Safe 5 purchased from reseller CryptoBilis in August 2026. Trezor has not yet received the device for verification.
-
What does Trezor advise CryptoBilis customers to do?
Customers who bought devices from CryptoBilis since March 2026 should move their funds to newly created wallets with new recovery seeds.
-
Have any CryptoBilis customers reported losing funds?
No CryptoBilis customer has reported losing funds, according to Trezor.
-
What did Trezor find in the devices it inspected?
Four inspected Trezor devices showed no signs of tampering. The investigation remains ongoing.
-
Why did Trezor remove CryptoBilis as a reseller?
Trezor removed CryptoBilis on October 9 following reports of tampered Ledger devices.
WuBlockchain