# Trezor Issues Urgent Security Warning Following Hardware Tampering Reports Customers who purchased devices from CryptoBilis must migrate funds to new wallets immediately. - **Source:** [CryptoPotato](https://brifing.si/source/bd22636b-ec8d-42a8-8cca-1937c50e0f6c) - **Published:** 2026-10-30 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/7092305e-e53b-4693-97e2-9f8a72135366 ## Unauthorized Hardware Implants Detected Trezor has issued an urgent security warning regarding hardware wallets purchased from the reseller CryptoBilis on or after March 2026. Reports indicate that some Trezor Safe 5 units were physically tampered with, featuring an extra circuit board containing a cellular module and an antenna hidden between the screen and main board. ## Sophisticated Supply Chain Attack The malicious hardware is designed to capture sensitive information displayed on the device screen, including wallet backups. By utilizing a cellular network, the implant transmits this data to external attackers whenever the wallet is plugged in. This sophisticated supply chain breach was identified following investigations into similar incidents involving Ledger devices. ## Immediate Migration Protocol Required Trezor advises affected users to move their funds to a newly created wallet with a fresh seed phrase immediately. Simply transferring a backup from a potentially compromised device to a new hardware wallet will not resolve the security risk. Users should utilize a secure software wallet or exchange as a temporary measure. ## Reseller Relationship Terminated CryptoBilis served as an official Trezor reseller in Southeast Asia until October 2026. Upon learning of the tampering reports on October 9, Trezor removed the company from its list of authorized sellers. The manufacturer is currently treating these reports as credible, despite not yet having the physical devices in their laboratory. ## Verification and Support Process Trezor has interviewed the customer who discovered the implant via video call and reviewed photographic evidence. While the specific device has not reached their lab, the company prioritized issuing a public warning to prevent potential fund losses. Affected customers are eligible for a direct replacement device or a voucher for a new unit. ## Phishing Risks and Precautions The company cautioned that malicious actors may exploit this incident to launch phishing campaigns. Users should remain vigilant against fake emails, letters, or phone calls claiming to be from Trezor support. Always verify communication channels directly through the official website and avoid entering existing wallet backups into any unverified or suspicious hardware. ## Broader Regional Security Context Hardware wallet security concerns have intensified following reports from the Singapore Police Force. Authorities confirmed that crypto users lost approximately $3.5 million due to tampered Ledger devices sold through local retail stores. These devices contained malicious components capable of stealing private keys, highlighting a growing trend of physical supply chain vulnerabilities. ## Proactive Risk Mitigation Strategy Although no stolen funds have been reported regarding the Trezor incident, the discovery underscores the critical importance of supply chain integrity. Users must purchase hardware wallets exclusively from authorized sources to minimize exposure. This event serves as a reminder that physical device security is as vital as digital encryption in protecting assets. ## Sources covering this story - https://cryptopotato.com/your-trezor-could-be-compromised-company-issues-urgent-warning-to-customers/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._