🔍 Read the full analysis: What The Hidden Implant Finding Means For Trezor Safe 5 Wallets on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Trezor confirmed that three Safe 5 hardware wallets bought through former reseller CryptoBilis contained an implant that copied information displayed on the device, including recovery words. The company says firmware 2.13.1 stops the implants it identified from capturing data, but cannot protect a backup captured before installation; no owners have reported lost funds.
Trezor confirmed on November 12 that three of its Safe 5 hardware wallets, all bought through former reseller CryptoBilis, contained an extra circuit board designed to copy information displayed on the device. The company says the implant could capture recovery words and passphrases, then transmit the data over a mobile network; it says no owners have reported losing funds.
Trezor’s lab examined one Safe 5 after an owner reported finding an extra board, and the company identified two additional affected devices from photographs supplied by their owners. The three wallets were purchased between August 20 and September 23, 2026, through CryptoBilis’s Tokopedia and Shopee stores and directly from the reseller. Trezor said the devices are three individual wallets of one model, not three separate affected models.
According to Trezor’s analysis, the board sits between the main circuit board and the screen. It copies information shown there, including recovery words displayed when creating a backup or entered when restoring a wallet, and a passphrase if one appears on-screen. The implant encrypts captured information and sends it over a mobile network to a server controlled by the attackers. If it cannot connect, Trezor says, it stores the data and attempts transmission again.
Trezor says the implant does not change the device’s firmware or its Secure Element, the dedicated security chip. The company released firmware version 2.13.1 on November 11 for the Safe 7, Safe 5, Safe 3 and Model T. It says the update prevents the implants it has found from capturing information on devices running the new firmware. Trezor also cautions that the update cannot protect recovery information captured before it was installed.
Trezor Safe 5 implant · how it works
What the hidden board copies, and what the fix stops
How Trezor describes the implant it found in three Safe 5 wallets bought from CryptoBilis, and what firmware 2.13.1 changes.
Inside the device (schematic)
mobile network
Step by step
- 1Recovery words appear on the screen, when a wallet backup is created or a wallet is restored
- 2The extra board copies them, and a passphrase if one is shown. Firmware and Secure Element stay unchanged
- 3It encrypts the data and sends it over the mobile network. No connection: it keeps the data and retries
- 4Firmware 2.13.1, released Nov 11: stops the implants found so far from capturing anything
Confirmed
3 Safe 5 devices, bought Aug 20 – Sep 23, 2026 from CryptoBilis
Being checked
48 CryptoBilis buyers came forward; no tampering found at other resellers in the region
Funds lost
None reported so far, Trezor says
Source: Trezor, “Our CryptoBilis investigation: what we found and what we’ve changed”, Nov 12, 2026; Trezor firmware changelog (2.13.1, released Nov 11, 2026). Schematic drawing, not the real board layout.
Graphic: Powered by Thorsten Meyer AI
Why Captured Recovery Words Matter
A wallet’s recovery words can provide a route to restoring access to the funds it controls. If an attacker obtained those words, updating the device later would not, on its own, make the already-captured backup secret again. Trezor’s warning about data captured before firmware 2.13.1 therefore matters even for users whose devices can now run the update.
The reported method also targets information shown on the device screen rather than modifying the firmware or security chip. Trezor’s account says the implant leaves those components unchanged, so checking that software is genuine would not, by itself, establish that a device has no added hardware. That is an implication of the company’s description, not a separate finding reported by Trezor. The case underscores why the source and handling of a hardware wallet can matter alongside its software protections.
The confirmed number is currently three affected Safe 5 devices, not all Safe 5 wallets or all devices sold in the region. Trezor says 48 CryptoBilis customers have come forward and that their devices are being checked. That gap between the confirmed cases and the broader customer group means the investigation is relevant to buyers while not establishing how many other devices, if any, were altered.
Products Worth Considering
Logitech MX Mechanical Wireless Illuminated Keyboard, Tactile Quiet, Graphite
LG UltraGear 32GX870A-B 32-inch 4K UHD OLED Gaming Monitor
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
As an affiliate, we earn on qualifying purchases.
From Reseller Warning to Lab Confirmation
CryptoBilis was an authorized reseller for both Trezor and Ledger in Southeast Asia. Trezor says it removed the company from its reseller network on October 9, 2026. The same day, Ledger began investigating reported losses among customers who had bought wallets from CryptoBilis. Ledger later said some of its devices had been physically tampered with; in an October 15 statement, it described the incident as “an attack on the distribution channel after the devices left our control.” That is Ledger’s characterization of its own case.
On October 28, a Trezor customer in Indonesia reported an extra circuit board in a Safe 5 purchased from CryptoBilis in August through Tokopedia. Trezor issued a warning on October 30 before it had examined the device, saying it did not want to leave buyers exposed while waiting for laboratory confirmation. The company says confirmation followed on November 12, after its lab examined the reported wallet and owners sent photographs of two more devices.
Trezor says every other device it has checked showed no evidence of tampering, and that checks of devices from its other regional resellers found none either. It is working with SEAL 911, the Security Alliance’s emergency response service. Trezor also says it has cut its reseller network by about 80%, though the supplied information does not give a date or further detail for that figure.
““It only listens.””
— Trezor
How Many Devices Were Affected
Three Safe 5 wallets are confirmed to contain implants, but the total number of altered devices, if any beyond those three, is not established in the supplied information. Trezor says 48 CryptoBilis customers have come forward and their devices are being checked. It has not reported the outcome of those checks or said how many customers bought devices during the relevant period.
The company has not reported customer fund losses connected to the three confirmed wallets. That does not establish whether captured information was successfully received or used by the attackers: the material provided does not say whether Trezor can verify what data reached the server, who controlled it, or whether it was accessed. It also does not identify the people responsible or explain how the devices were altered before reaching buyers.
Trezor’s account describes the implant’s capabilities and the firmware response, but does not provide independent laboratory findings in the supplied material. Buyers should distinguish the company’s confirmed examination of three devices from unresolved questions about the wider distribution and any possible exposure.
Checks and Firmware Rollout
Trezor says it is checking devices reported by CryptoBilis customers and working with SEAL 911. The next useful update would clarify how many of the 48 customers’ devices have been examined, whether further implants have been found, and whether the investigation has identified the source or route by which the boards were fitted.
For owners, Trezor’s stated software measure is to install firmware 2.13.1 on supported devices. The company says this blocks the implants it has identified from capturing information on updated devices, but does not say that installing the update can undo an earlier capture. Its warning means users should not treat a firmware update as proof that any previously displayed recovery words remained private.
The supplied information does not provide a device-level test that owners can run to rule out tampering, or a detailed procedure for people who think their recovery information may have been exposed. Further guidance from Trezor on device checks and the investigation’s results will help define the scale of the incident and what affected customers should do.
Key Questions
What was found inside the Trezor Safe 5 wallets?
Trezor says three Safe 5 devices contained an extra circuit board fitted between the main board and the screen. The company says it copied information displayed on the device and sent captured data over a mobile network.
What information could the implant copy?
According to Trezor, it could copy recovery words shown during wallet creation or entered during restoration, as well as a passphrase if one appeared on the screen. Trezor says the implant encrypted the captured data before attempting to transmit it.
Does firmware 2.13.1 fix the problem?
Trezor says version 2.13.1 stops the implants it found from capturing information on devices running the update. The company cautions that it cannot protect a backup captured before the update.
Have customers lost funds?
Trezor says none of the owners of the three confirmed devices has lost funds, and no customer has reported losses in connection with the finding. The supplied information does not establish whether captured data reached or was used by the attackers.
How many CryptoBilis customers are being checked?
Trezor says 48 CryptoBilis customers have come forward and their devices are being checked. The company has not yet stated how many checks are complete or whether more implanted wallets have been found.
Source: ThorstenMeyerAI.com
