Hardware Implants found in Trezor safe 5

[Meuserna]

I really hope that this is an isolated incident, because most likely, during the excitement with Ledgers, conscientious Trezor holders should have checked the structure of their hardware wallets.

Not just Trezor users.

Anyone who uses a commercial hardware wallet should check their devices. Every commercial hardware wallet is a target for supply chain attacks.

I don't think it's happened yet, but we have to assume counterfeit devices will be the next wave, because components are cheap and thieves only need to figure out how to trick the firmware into thinking the components are legit. And while that's probably too challenging for 2026 hackers, with AI reverse engineering everything, it's only a matter of time before it becomes a real threat.

All of this makes me more and more glad I switched to DIY (ShieldSigner & Krux, and I plan on trying Kern next year).

[decodx]

I don't get it, why is this from only CryptoBilis and not from a different reseller. It shows that an insider CryptoBilis is either tampering with the wallet or someone from outside is taking advantage of the company to implant chips in the hardware wallets in their possession. I hope no one using Trezor Safe 5 will be affected because the losses are too much this year.

 I think other hardware wallets that company that CryptoBilis is dealing should check all their hardware wallet in CryptoBilis company. Who knows if there will be an implant on a different brand of hardware wallet in CryptoBilis.

This is obviously not a coincidence. I think that Cryptobilis knows exactly what they are doing. What are the chances that one reseller suddenly has two products tampered with? Especially after the first one, there should have been a quality check. So there is not much doubt in my mind this is happening on purpose and Cryptobilis is knowingly involved in it.

There is something funky going on....

This doesn't automatically imply they're directly involved. From what I've seen, they stopped ALL hardware wallet sales, both online and physical stores, as soon as reports first surfaced about the Ledger HW wallets. Reportedly, this Trezor wallet was purchased in August 2026—that is, before the Ledger incident.

CryptoBilis could very well be innocent, and some other party in the supply chain could be responsible for the malicious tampering. I'd avoid jumping to conclusions until an investigation is completed and the facts are clear. But yeah, if you are one of those who purchased a hardware wallet from them, you should consider it insecure and move your funds asap.

[PrivacyG]

So can we go back to recommending stripping an old laptop from any wireless conectivity and using that as a Wallet now, just like we used to years ago?

[Meuserna]

So can we go back to recommending stripping an old laptop from any wireless conectivity and using that as a Wallet now, just like we used to years ago?

No, because that's reckless. The threats are much greater than they used to be because thieves aren't going after $5 Bitcoin. They're going after (checks current price) $77k Bitcoin.

Get a Raspberry Pi Zero. It has no wifi. It has no bluetooth. It has no software at all. It's just a development board. And because it isn't designed for any specific purpose, thieves and scammers aren't going to be hacking them in hopes of finding one intended to be used as a hardware wallet. They'd have to hack tens of thousands of devices just in hopes of finding one wallet.

Get a camera and LCD hat for the Pi. Install SeedSigner. Better yet, install ShieldSigner.

This isn't hard, and it provides better Bitcoin security than any commercially available hardware wallet at any price.

Stateless? Check. By not saving your seed or wallet on the device, you're in no danger if somebody finds the device, because there's nothing on it.

Airgapped? Check. Internet hackers can't reach it. No wifi. No bluetooth. No worries.

Encrypted Seed QR? Check. Even if somebody finds your seed QR, all they found is a weird thing that won't scan. It could be a link to your favorite porn website for all they know.

Passphrase QR? Check. This enables the use of strong passphrases. Weak passphrases are hackable, and having to enter the passphrase manually every time encourages the use of weak passphrases. Passphrase QR solves this.

Off the shelf parts? Check. This solves the threat of supply chain attacks.

Fully open source? Check. You can verify every line of code to prove it's safe. Not a coder? Use AI. You can also contact the devs or any others who use it. Bitcoin itself is open source. Your hardware wallet should be too.

None of what I just listed is hard, but it's a different way of working. It's also much safer.

[ABCbits]

If it's true, then Trezor is being very generous. Last time i checked, Ledger never offered this kind of compensation from anyone who buy their device from CryptoBills.

We don't know that for sure. Maybe those who contact them get free replacements. I remember years ago that people reported that Ledger gave free replacement devices even to customers with expired warranties if their hardware wallets broke.

That's possible. But with how Ledger have more aggressive marketing these days, surely they would already publicly announce that they offer replacement for whoever buy their device from CryptoBills.

CryptoBilis could very well be innocent, and some other party in the supply chain could be responsible for the malicious tampering. I'd avoid jumping to conclusions until an investigation is completed and the facts are clear. But yeah, if you are one of those who purchased a hardware wallet from them, you should consider it insecure and move your funds asap.

But with how hardware wallet from 2 different brand affected, IMO the possiblity they're being innocent become lower. It makes me wonder if there's rouge CryptoBills's workers or contractors that tamper the device and CryptoBills never notice it.

[Pmalek]

But with how hardware wallet from 2 different brand affected, IMO the possiblity they're being innocent become lower. It makes me wonder if there's rouge CryptoBills's workers or contractors that tamper the device and CryptoBills never notice it.

Whoever is modifying these devices, it's got to be a big operation. "Big" can mean a lot of things. Let's say it's more than one or two individuals installing these implants in devices in their garage. I don't believe these are devices that were initially bought by scammers, manipulated and then returned with the idea of being resold. It's more probable that it's an inside job, involving people who can grab 10/50/100 hardware wallets somewhere in the supply chain, modify them, and put them back, without anyone noticing or not wanting to notice.

[FinneysTrueVision]

But with how hardware wallet from 2 different brand affected, IMO the possiblity they're being innocent become lower. It makes me wonder if there's rouge CryptoBills's workers or contractors that tamper the device and CryptoBills never notice it.

And they had also secretly sold the company to foreign buyers who made them sign an NDA. That’s as big of a red flag as you can get.