Trezor Warns of Possible Hardware Implant in Crypto Wallets

Trezor, a well-known maker of cryptocurrency hardware wallets, has issued a warning after a customer discovered a potential hardware implant in a Trezor Safe 5 device. The unit was purchased through the reseller CryptoBilis and reportedly contains an unauthorized circuit board capable of transmitting sensitive data.

Although Trezor has not independently confirmed the finding, it is urging all customers who bought devices from CryptoBilis since March 2026 to assume compromise. Users are instructed to transfer their assets to a new wallet secured with a fresh recovery phrase as a precaution.

Suspicious Hardware Discovery

• A user reported finding an unexpected circuit board inside a Trezor Safe 5 bought from CryptoBilis.
• The added component appears to send the wallet's recovery phrase using a mobile network connection.
• This type of modification could allow attackers to remotely access wallet credentials.
• Trezor has not yet physically inspected the device but treats the claim seriously.

Security Recommendations

• All Trezor users who bought from CryptoBilis since March 2026 should consider their devices compromised.
• Immediate fund migration to a new wallet with a regenerated recovery phrase is advised.
• Avoid using the potentially infected device until further investigation concludes.
• This incident underscores the importance of purchasing hardware directly from trusted sources.
• Organizations managing crypto assets should audit supply chain and reseller practices.

Sources

• Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis