Trezor confirms CryptoBilis Safe 5 implants, ships firmware block

Trezor has confirmed that three Safe 5 wallets sold by its former reseller CryptoBilis carry a crypto-theft implant, upgrading an earlier single-device report we covered on 30 October from "suspected" to verified. The company examined one wallet in its lab and identified two more from owners' photos, and says 48 CryptoBilis customers have contacted it. If you bought any Trezor from CryptoBilis since March 2026, treat the recovery phrase as compromised and move your funds now — a firmware update alone does not undo a seed that was already read.

What the implant does

Per BleepingComputer and The Hacker News, reporting on Trezor's findings, the implant is an extra circuit board wedged between the Safe 5's main board and its display. It does not modify the legitimate firmware or the Secure Element — it passively reads what the screen shows. During wallet creation or recovery that includes the recovery phrase (and passphrases), which it encrypts and sends over a cellular network to an attacker-controlled server. If there is no signal, it stores the data and keeps retrying. The three confirmed units were bought between 20 August and 23 September 2026.

Because the implant sits below the firmware layer and carries its own radio, the wallet's core guarantee — that the seed never touches a networked surface — is defeated inside the case, where neither the device's own integrity checks nor the user can see it.

The fix, and its limit

BleepingComputer reports Trezor shipped firmware 2.13.1 on 11 November with "a protection that stops the implants we've found from capturing anything." Confirm the exact version against Trezor's firmware changelog before relying on it. Critically, the update blocks future capture only: any recovery phrase displayed on an implanted device before the update should be considered already leaked. The Block reported four other CryptoBilis-sold Trezor devices inspected so far showed no tampering, and no affected customer has reported stolen funds yet.

What to do today

1. Bought a Trezor from CryptoBilis since March 2026? Create a brand-new wallet with a new recovery phrase and move funds to it. Do not reuse the old seed.
2. Do not restore the old seed onto another device — that re-exposes the same phrase.
3. Apply the latest Safe 5 firmware, but do not treat it as a substitute for rotating the seed.
4. Keep the device and claim a replacement. Trezor is offering replacements or vouchers to anyone who bought from CryptoBilis since March 2026, tampered or not.
5. Ignore "recovery help" messages. Trezor Support never asks for a recovery phrase; scammers are riding the incident.

Context

CryptoBilis is the same reseller tied to a confirmed Ledger implant, which we covered here — two hardware-wallet brands compromised through one distribution channel. Trezor dropped CryptoBilis as an authorized reseller on 9 October and says it has since cut its global reseller network by about 80%. The durable lesson for operators holding keys in hardware: buy direct from the vendor, and treat any seed ever shown on a device of uncertain provenance as burned.