繼 Ledger 爆發大規模硬體錢包供應鏈竊幣事件後，另一家冷錢包大廠 Trezor 也面臨相同經銷通路的安全威脅！Trezor 近日證實，一名印尼用戶通報從前授權經銷商 CryptoBilis 購買的 Trezor Safe 5，疑似遭植入能夠截取錢包恢復助記詞的惡意電子元件。

Škodlivé hardwarové implantáty byly nedávno nalezeny v kryptopeněženkách Ledger koupených u CryptoBilis v Malajzii. Ty odeslaly soukromé klíče a následně došlo k odcizení kryptoměn. Konkurenční český výrobce kryptopeněženek Trezor také testoval některé modely svých peněženek koupených u CryptoBilis. Nejméně jeden uživatel nahlásil, že jeho peněženka, zakoupená v letos v srpnu u CryptoBilis, obsahuje také implantát. Toto zařízení se ještě bude testovat, ale Trezor varuje uživatele, aby byli opatrní. CryptoBilis již od 9. října Trezor nenabízí, byl stažen z prodeje. (zdroj: bleepingcomputer)

🔍 Incident principal Trezor a reçu un signalement crédible d'un utilisateur indonésien ayant acheté un portefeuille matériel Safe 5 via le revendeur CryptoBilis sur la plateforme Tokopedia en août 2026. À l'ouverture du boîtier, l'utilisateur a découvert une carte de circuit imprimé supplémentaire insérée entre la carte principale et l'écran, équipée d'un module cellulaire et d'une antenne.

A Trezor Safe 5 sold by CryptoBilis, the reseller linked to the recent Ledger wallet drains, may contain a hidden implant that steals the owner’s recovery phrase, Trezor has warned. Trezor is a Czech company and part of SatoshiLabs Group. It has made hardware wallets since 2014, and its current models are the Safe 3, Safe 5 and Safe 7. “If you bought a Trezor from CryptoBilis from March 2026 onwards and are using it …

Pengguna di ASEAN mengaku kehilangan aset digital setelah beli wallet kripto Ledger dari reseller resmi CryptoBilis, yang ternyata sudah disusupi chip ilegal. Wallet itu dijual di RI. #kumparanTEKNO

Trezor advirtió a los clientes que compraron sus billeteras de hardware a través del revendedor CryptoBilis que recibió un reporte creíble de un posible implante físico en una Trezor Safe 5. Recomienda mover los fondos a una billetera nueva. Por ahora no hay pérdidas confirmadas ni el dispositivo fue examinado en laboratorio. (Fuente: BleepingComputer, con datos de Decrypt y The Block…

Trezor urged customers who bought devices from CryptoBilis since March to move their funds after a report of a suspected hardware implant.

A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a blog post

Singapore police say at least two cases involving tampered Ledger hardware wallets have been reported since Sept. 10, with combined losses of about 3.5 million Singapore dollars ($2.7 million). That puts the first local report almost a month before the wider incident became public. Ledger issued its own alert on Oct. 9 about tampered devices in the CryptoBilis supply chain, and almost $100 million was drained from wallets containing spyware components. The timing raises questions about when authorities and Ledger learned of the problem.

A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a blog post

Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia.

Trezor alerted customers after reports that Safe 5 hardware wallets sold by vendor CryptoBilis may contain a suspected implant enabling theft. The company warned buyers to inspect devices and follow safety guidance while investigators and vendors assess whether units were tampered with before sale.

A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. Trezor said in a blog post

A hidden implant was reported in a Trezor hardware wallet sold by CryptoBilis, the reseller tied to $93M in Ledger thefts.

The hardware wallet manufacturer has yet to examine the device, but is treating the report as credible and told buyers to move their funds.