Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis
Trezor urged CryptoBilis buyers to migrate funds after receiving a credible report of a hardware implant inside a Safe 5 device.
Hardware wallet manufacturer Trezor has issued an urgent security warning after receiving a credible report of a suspected hardware implant discovered inside a Safe 5 device sold through third-party reseller CryptoBilis. The company is urging all customers who purchased a Safe 5 through CryptoBilis to immediately migrate their funds to a secure wallet, citing potential compromise of the affected hardware.
Trezor has long maintained that purchasing hardware wallets exclusively through authorized channels is critical to device integrity. The company's supply chain security guidelines explicitly warn against buying devices from unauthorized third-party vendors, as tampering during shipping or storage can expose users to significant financial risk. This incident underscores the persistent vulnerabilities that exist when hardware wallets pass through unverified distribution networks before reaching end users.
The report raises broader concerns across the crypto hardware security industry, where supply chain attacks have historically proven difficult to detect and devastating in their consequences. Security researchers have previously demonstrated that even minor physical modifications to hardware wallets can enable attackers to extract private keys or manipulate transaction signing, leaving user funds entirely exposed. Incidents of this nature can erode consumer confidence in hardware wallet products more broadly.
Trezor has not yet publicly disclosed the number of affected units or the precise nature of the suspected implant. Users and industry observers will be watching for further technical details from the company's ongoing investigation, as well as any response from CryptoBilis.
Source: The Block
