Trezor Safe 5 Implant: What Was Secretly Hidden Inside These Wallets?
Trezor Safe 5 Implant: Hidden Board Found in 3 Wallets, What Now?
As of November 13, 2026, the Trezor Safe 5 implant case has moved from one claim to three confirmed devices.
In crypto news today, the wallet maker said a malicious circuit board sat inside units sold through CryptoBilis, according to its investigation update dated November 12, 2026.
This Trezor Safe 5 news follows an October 30 warning. No user funds have been reported stolen so far.
How Many Wallets Have Implants?
Of 48 customers who came forward, three units carried the Trezor Safe 5 implant.
Trezor CryptoBilis checks found nothing in devices from other regional resellers, and no other model was affected.
Item | Detail |
Confirmed devices | 3 Safe 5 wallets |
How verified | 1 in lab, 2 from owner photos |
Purchase window | Aug 20 to Sep 23, 2026 |
Sold through | Tokopedia and Shopee stores, plus direct |
Funds lost | None reported |
How Does the CryptoBilis Implant Work?
The CryptoBilis implant is an extra board fitted between the main board and the screen. It only listens. The company said it never alters the firmware or the Secure Element.
Copies everything displayed, including typed input
Stores recovery seed words and any passphrase shown
Encrypts the data, then sends it over a mobile network
Retries until a connection succeeds
Can a Trezor Safe 5 Implant Steal Seed Phrase?
According to the update, yes. The board captures a Trezor Safe 5 seed phrase whenever the words appear during setup or recovery.
The patch cannot protect a backup copied earlier, so affected owners still need a new seed.
What Changed After the Supply Chain Attack?
Step | Detail |
Trezor firmware 2.13.1 update | Released November 11, blocks capture by the found implants |
Reseller network | Cut by about 80% |
Response partner | SEAL 911, the Security Alliance emergency service |
The firm said the board works like implants found in Ledger devices. Its Trezor supply chain attack review began after Ledger opened an investigation on October 9, per the October 30 notice.
Trezor Bought From CryptoBilis: What to Do?
Should I move funds? If the device came from CryptoBilis since March 2026, the company says yes.
Move funds to a wallet with a new seed
Keep the device and contact support
Trezor refund: offered where shipping rules block a replacement
Trezor replacement: new device for buyers since March 2026
Never share the recovery phrase, since scammers pose as support
Is Trezor Safe 5 Safe to Use?
Is my device safe? The company found no implants in other models or resellers. It also said no dependable self-check exists for Trezor hardware wallet tampering, and weighing a unit is unreliable. Buying direct from its website is advised.
Is CryptoBilis legit? The firm removed it as a seller on October 9 and said it does not know who built the implants.
What Did the Tweets Say?
Trezor also covered this news in its tweet on X, announcing the follow-up findings.
Wu Blockchain also covered this news in its tweet on X, noting 48 inspected users and three implanted wallets.
Expert View: What Could This Mean for Hardware Wallet Security?
Analysts following crypto news may read the Trezor Safe 5 implant case as a supply chain problem rather than a chip failure, since the board sits outside the Secure Element.
Trezor news today also shows how much a reseller network can affect user trust. Readers should watch whether lost funds, new devices or other models are confirmed.
Disclaimer: This article is for information only and is not financial, legal, or investment advice. Crypto assets are volatile, and you can lose money. Verify details with official sources before making any decision.
