Trezor Confirms Hardware Implants in Three Safe 5 Wallets,…
By Karthik Subramanian
AI summary of the source article
Trezor confirmed that three Safe 5 hardware wallets distributed through reseller CryptoBilis contained malicious hardware implants capable of stealing recovery phrases. In response, the company released an emergency firmware update, offered device replacements, and reduced its authorized reseller network by approximately 80%.
Why it matters
"The findings highlight an important limitation of hardware wallet security: even when private keys remain protected within dedicated security chips, compromised physical components can expose recovery information before transactions are authorized."
Key facts
- Three Trezor Safe 5 devices sold via reseller CryptoBilis were found with unauthorized circuit boards that captured recovery phrases and passphrases.
- Trezor released firmware version 2.13.1 on November 11 to block the implants from capturing further data and offered replacement devices.
- Trezor reduced its authorized reseller network by approximately 80% and introduced stricter product storage and handling requirements.
Source excerpt · FinanceFeeds
The hardware wallet manufacturer releases emergency firmware protection after discovering devices capable of stealing recovery phrases, while offering replacements to customers who purchased through CryptoBilis. Cryptocurrency hardware wallet manufacturer Trezor has confirmed malicious hardware implants in three Safe 5 devices distributed through Southeast Asian reseller CryptoBilis, prompting a m…