Trezor confirms crypto-stealing implants in three Safe 5 wallets sold by CryptoBilis

What happened

Trezor, the hardware wallet maker, confirmed on November 12, 2026 that three of its Safe 5 wallets sold by the Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal the owner’s wallet recovery phrase. The confirmation closes an investigation that began in late October, when a customer found an unauthorised circuit board inside a Safe 5 bought from CryptoBilis; Trezor warned of a suspected implant on October 30. In the November 12 update, Trezor said it has now examined that first device in its laboratory and identified two more compromised wallets from photographs their owners submitted. All three were bought from CryptoBilis between August 20 and September 23, 2026. The implant is an extra circuit board fitted between the Safe 5’s main board and its display. It watches the screen and copies the recovery words when they are shown — while creating a new wallet backup, or restoring one — and it can also capture a displayed passphrase. It encrypts what it takes and sends it over a mobile network to an attacker-run server; with no connection it holds the data and keeps trying. It changes nothing on the wallet itself — not its firmware, not its Secure Element. On November 11, Trezor released firmware version 2.13.1, which it says stops the implants it has found from capturing anything on a device that runs it — but the company is explicit that the update cannot protect a recovery phrase that was already captured before it was installed. Trezor removed CryptoBilis from its authorised resellers on October 9, the day Ledger began investigating losses among the reseller’s customers; Ledger later confirmed an unauthorised implant in a wallet CryptoBilis sold, and says attackers drained wallets in a single coordinated operation. Trezor says the implants in its wallets work the same way as those found in Ledger devices, adapted to the Safe 5’s display. It has not said who fitted the implants or where in the supply chain that happened.

Who is affected

The people at risk are anyone who bought a Trezor wallet from CryptoBilis — and Trezor’s advice reaches further than the three confirmed devices. The three wallets with confirmed implants are all Safe 5 models bought between August 20 and September 23, 2026. But Trezor is offering a replacement device to anyone who bought a Trezor wallet from CryptoBilis since March 2026, and its standing advice covers every CryptoBilis buyer from that date. Forty-eight CryptoBilis customers have contacted Trezor since its October warning, and the company is examining their devices in its laboratory or from photographs of their internals; it has not said how many it has checked. So far the confirmed implants are limited to Safe 5 devices sold through CryptoBilis; Trezor has inspected devices from other resellers in the region and found no tampering, and no confirmed implants in its other models.

How serious

The concrete risk is a drained wallet. A recovery phrase is the master key to a self-custodial wallet: anyone who holds it can restore the wallet elsewhere and move the funds, with no password or second factor in the way. The implant makes that risk quiet — it copies the phrase the moment it appears on screen and sends it over a mobile network, so the theft needs nothing from the owner beyond creating or restoring a backup. The firmware update closes the capture route on updated devices, but it is not a remedy for a phrase already taken: a captured phrase is still a live key in the attacker’s hands, which is why Trezor tells CryptoBilis buyers to move funds to a newly created wallet with a brand-new phrase rather than relying on the update alone. The confirmed scale is small so far — three devices, none of whose owners has reported losing funds — but that is weak evidence: Trezor’s wallets are self-custodial, so the company cannot see anyone’s balance, and an owner may not discover a copied phrase until the funds move. The wider signal is the pattern: the same reseller sold Ledger wallets with the same kind of implant, and attackers used those to drain wallets in one coordinated operation.

What to do now

If you bought a Trezor wallet from CryptoBilis, start with Trezor’s own advice. Update the wallet to firmware 2.13.1 — it stops the implants found so far from capturing anything further. Then move your cryptocurrency to a newly created wallet with a brand-new recovery phrase; restoring the old phrase elsewhere does not help, because it may already be compromised. Do not set up an unused wallet bought from the reseller, and never type an existing recovery phrase into one. Keep the wallet and contact Trezor Support, which is offering a replacement to anyone who bought from CryptoBilis since March 2026 — and contact Support if you are not sure where your wallet came from. Do not weigh or open the wallet to check it: neither is a reliable test for an implant. And never share your recovery phrase: Trezor will never ask for it, and scammers may pose as the company to offer replacements or refunds. If you bought your Trezor anywhere else, the current evidence gives no reason to act — but buy only from Trezor directly or an authorised reseller. If Trezor confirms an implant outside CryptoBilis or the Safe 5, or a loss of funds linked to the implants, this report will be updated.

Sources: BleepingComputer, “Trezor confirms crypto-stealing implants in three wallets, releases fix,” November 13, 2026 (reporting Trezor’s November 12 investigation update) · The Hacker News, “Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases,” November 13, 2026