Trezor Finds Implants in Three CryptoBilis Wallets

Trezor said three Safe 5 hardware wallets sold through reseller CryptoBilis contained unauthorized hardware implants, prompting the company to release a firmware update and advise affected buyers to move their funds to a new wallet. The company also said it had reduced its authorized reseller network by approximately 80% and tightened requirements for remaining partners.

The affected devices were sold between August 20 and September 23, 2026. Trezor examined one wallet in its laboratory and assessed two others using photographs of their internal components. The implants were additional circuit boards carrying cellular modules and antennas, according to the company’s technical findings.

Trezor said its review covered 48 devices and found no signs of tampering in other models or in devices sold through other distributors. The company’s findings have not been independently verified in the reports. It said no customer financial losses had been reported as of its November 12 disclosure.

Trezor released firmware version 2.13.1 on November 11. The company said the update changes the sequence of commands sent to the wallet’s display, preventing the implants from recognizing the sequence...