Trezor Receives Report About an Implant in One of Their Wallets

Trezor say they've received a report of a hardware implant in one of their devices purchased from CrytpoBilis, the same reseller that sold implanted Ledger wallets previously.

The cryptocurrency wallet maker reports that a customer claims they discovered a hardware implant in a Trezor Safe 5 purchased from CryptoBilis, an official Trezor reseller in Southeast Asia until October of this year.

Trezor's security team hasn't received the device yet to confirm the claim, but they are urging users who bought a Trezor wallet from CryptoBilis from March 2026 onward to move their funds to a new wallet.

If you purchased a Trezor device from CryptoBilis within that timeframe, you're eligible to receive a replacement if you contact their support.

They haven't received any reports of funds being lost due to implants yet. Trezor is treating the report as credible anyway after a video interview and their description.

The report describes an extra circuit board inside the wallet between the main board and the screen which reads the contents of the screen and sends them off via a cellular modem.

This is similar to how the implant in the Ledger wallets worked. In that case, the wallets were fitted with chips that read the 24-word seed phrase from the screen during initial setup of the wallet and sent it out via cellular data on a built-in eSIM. The Secure Element of the device was not compromised, merely bypassed by reading the human-readable seed phrase from the screen itself.

Ledger attributed the attack to a "highly organized criminal group" but did not specify exactly who was behind it.

Trezor is now asking for anyone who purchased a Trezor wallet from a store supplied by CryptoBilis, which you can check on your receipt or contact their support to check, to contact Trezor support if you notice anything wrong with your device.

Weighing the device or trying to inspect it yourself for the implant is not recommended, and instead you should move your funds immediately if you purchased from CryptoBilis.

Trezor announced it would be restricting its authorized resellers already back in October 13 after the reports came in from Ledger:

Trezor also warns that scammers will use this incident to target people. Trezor support won't ever ask you for your recovery phrase, don't send it to anyone. Be on the lookout for fake phishing emails, physical letters, and phone calls trying to scam you out of your money.