Trezor Finds Hidden Implants in Wallets Sold by CryptoBilis

Emily Davis · 2026-11-13

Imagine buying a hardware wallet, the kind you trust to keep your crypto safe, and finding out it's been tampered with. That's exactly what happened with three Trezor Safe 5 wallets purchased from the reseller CryptoBilis. Trezor dropped a bombshell yesterday: these wallets contain an implant—an extra circuit board that can copy your recovery phrase. ### What Exactly Is the Implant? The implant is a sneaky little addition. It reads your recovery phrase right off the wallet's screen and then sends it over the mobile network to a server controlled by attackers. So even if you think your funds are secure because you're using a hardware wallet, this implant could be secretly leaking your keys. Trezor examined one of the wallets in their lab and confirmed the implant's presence. They also identified the other two wallets as having the same issue. ### How Did This Happen? CryptoBilis, the reseller, apparently sold these compromised wallets. Trezor is clear that the implants were not part of their manufacturing process. This is a third-party tampering issue. It's a reminder that where you buy your hardware wallet matters just as much as which one you buy. ### What Should You Do If You Bought from CryptoBilis? If you purchased a Trezor Safe 5 from CryptoBilis, you need to act fast. Here's what Trezor recommends: - Stop using the wallet immediately. - Do not enter your recovery phrase into it. - Contact Trezor support for guidance. - Consider moving your funds to a new, secure wallet. Trezor is working to identify affected customers and has promised to help. But the bigger lesson here is about supply chain security. Hardware wallets are only as secure as the chain of custody. ### The Bigger Picture This incident raises questions about how we verify the integrity of our devices. It's not just about Trezor; any hardware wallet could be vulnerable if tampered with before it reaches you. Always buy directly from the manufacturer or an authorized reseller. And if a deal seems too good to be true, it probably is. Trezor's quick response is commendable, but it's a wake-up call for the entire crypto community. Your recovery phrase is the keys to your kingdom—literally. Guard it fiercely, and trust but verify.