Hardware wallet maker Trezor has confirmed that three Trezor Safe 5 devices purchased from the reseller CryptoBilis were fitted with an unauthorized implant — an additional circuit board that can capture the wallet's recovery phrase — and has warned users to treat any device bought through that channel as compromised. The company disclosed its findings on November 12, according to The Hacker News, after examining one of the wallets in its own lab and identifying the other two through the reseller's records.
What the implant does
The added board is not part of Trezor's design. According to the company's analysis, it reads the recovery phrase as it is displayed on the wallet's screen and then transmits it over the mobile network to a server under the attackers' control. That combination is significant: a recovery phrase is the master secret behind a wallet, and anyone who holds it can restore the associated funds on entirely different hardware without ever touching the original device again. Because the data leaves over cellular connectivity rather than a USB or Bluetooth link to the owner's computer, the exfiltration would be invisible to a user who only inspects their host machine.
How the devices were found
Trezor's investigation began with a single wallet that was sent in for examination. Lab inspection of that unit revealed the extra circuitry, and the company then worked to establish how widely the tampering extended. It identified two further affected devices sold through CryptoBilis, bringing the confirmed total to three. The disclosure follows earlier warnings from Trezor about supply-chain risks associated with devices obtained from third-party resellers rather than directly from the manufacturer or its authorized partners.
Why reseller purchases are the weak point
Hardware wallets are designed around the assumption that the device itself can be trusted to generate and store keys. That assumption breaks down when a unit passes through an intermediary with the opportunity to open the packaging and modify the hardware before it reaches the buyer. Anti-tamper packaging and self-check routines raise the cost of such attacks, but they are not absolute guarantees, particularly when a device is sourced outside official channels.
The CryptoBilis case is a reminder that the threat model for a hardware wallet includes the journey the product takes to the customer's door, not just the firmware running on it. Buyers who save money or time through an unofficial reseller may be accepting a risk that no amount of careful seed-phrase hygiene can offset.
What users should do
Trezor's guidance centers on provenance. Anyone who purchased a Trezor Safe 5 from CryptoBilis should assume the device may have been tampered with and should not use it to generate or enter a recovery phrase. The safest course is to move funds to a wallet whose seed was created on a device obtained directly from Trezor or an authorized distributor, and to treat any phrase that was ever displayed on a suspect unit as permanently exposed. Because a compromised phrase allows an attacker to sweep funds at any time, transferring assets promptly matters more than waiting for further confirmation.
More broadly, the incident reinforces long-standing advice for self-custody users: buy hardware directly from the vendor, verify packaging and device integrity on arrival, and never restore a seed phrase onto hardware whose history cannot be accounted for. Users who suspect tampering should contact Trezor directly rather than the reseller.
The bigger picture
Supply-chain tampering of hardware wallets is a small but high-impact category of attack. It requires physical access and a degree of manufacturing effort, but the payoff — a stream of recovery phrases delivered silently to an attacker-controlled server — is enormous relative to the cost. As crypto holdings grow and self-custody becomes more common, resellers and secondary marketplaces will remain an attractive vector for adversaries seeking to intercept keys before they are ever used.
The Trezor disclosure also highlights the value of vendor-led physical inspection. Without the lab teardown of that first returned wallet, the implant could have continued harvesting phrases unnoticed. For the security community, the lesson is that hardware trust must be established end to end — from factory to unboxing — and that any gap in that chain is a potential point of compromise.
