Trezor Supply Chain Attack: How It Compares With Ledger's Case The latest Trezor security alert concerns a hidden implant reported inside one Trezor Safe 5 sold by the reseller CryptoBilis. T
The latest Trezor security alert concerns a hidden implant reported inside one Trezor Safe 5 sold by the reseller CryptoBilis. Trezor has not yet tested the device, and no buyer has reported lost funds.
Still, the company asks anyone who bought a Trezor from CryptoBilis from March 2026 to move coins to a new wallet with a new recovery seed, per itsofficial post on October 30.
A customer in Indonesia sent the report through Trezor’s responsible disclosure program on October 28. The device was bought in August through the Tokopedia store of CryptoBilis, a former authorized reseller in Southeast Asia.
Source: Official Blog
Trezor calls the report credible after reviewing photos and a video interview, but the device has not yet reached its lab. Fears of a Trezor hack therefore rest on one unverified report, and no Trezor wallet security breach has been confirmed.
Claimed hardware: an extra circuit board between the main board and the screen, with a cellular module and antenna
How it would work:it reads what the screen shows, including the recovery phrase, and sends it over a mobile network when the device is plugged in
Losses:none reported by CryptoBilis buyers, and the reporting customer had moved funds before finding the board
Scope:the CryptoBilis Trezor warning covers every Trezor model bought there
The Trezor CryptoBilis implant claim follows a bigger hardware wallet hack at Ledger. Drained wallets surfaced on October 9, and Ledger confirmed an unauthorized implant in one affected device the next day.
One researcher estimate puts the losses near $93 million, though Ledger has not confirmed a total. Ledger later said its implant copies the recovery phrase during setup and sends it over LTE.
Source: Ledger Official Statement
Trezor says the new case appears to work in a similar way, but it will not compare the two until investigations end. It removed CryptoBilis as a reseller on October 9 and has since limited its sellers.
Trezor says four returned devices inspected so far showed no tampering. In both brands, the suspected point of Trezor reseller tampering is the shop stage, not the factory.
Trezor’s guidance is short and practical:
Already using it: move funds to a new wallet with a new seed, and never reuse the old seed on any device
No other hardware wallet: move coins temporarily to a trusted software wallet or exchange, and check the full receiving address
Not set up yet:leave it unused and never enter an existing seed
Replacement: buyers since March 2026 can get a free device or a voucher through Trezor Support, and should keep the CryptoBilis unit
No home tests: weighing or opening the device is unreliable
Scams:Support never asks for a seed, and phishing emails, calls and letters are likely
The alert lands as Binance handles the largest theft on record. In crypto hack news from this week, Binance puts the impact at about $6.3 billion and says roughly $3 billion has been frozen, perofficial ncident statement.
The exchange says a compromised engineer’s laptop may have let an attacker submit withdrawals. It says user funds are safe and that it will cover all losses.
Analysts link the attack to North Korea, though Binance has not named the attackers. Bitcoin price fell more than 3% to $77K on Friday, per CoinMarketCap data.
The two cases are different attacks:
Binance hack:a breach of internal systems at a custodial exchange
CryptoBilis cases: a physical supply chain attack at the reseller stage, aimed at self-custody seeds
Self-custody hardware risks now start at the point of purchase, so buying direct from the maker removes one link in the chain. This report is informational and not financial or security advice.
The next Trezor security alert update depends on one lab test. If the device proves to carry the implant, one report becomes a second confirmed supply chain attack on a major wallet maker. Trezor says it will update its notice if any losses surface.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Crypto markets carry significant risk. Always do your own research before making any investment decisions.
