Trezor Warns Users Over Hardware Tampering
Key Summary
Trezor has directed customers who purchased hardware wallets from CryptoBilis on or after March 2026 to immediately migrate funds to newly generated seed phrases following supply chain tampering discoveries.
Key Bullets
- Trezor directed customers who bought hardware wallets from CryptoBilis on or after March 2026 to sweep funds into newly generated wallets immediately.
- Investigators found that a modified Trezor Safe 5 contained an illicit circuit board and cellular module designed to exfiltrate seed phrases.
- Singapore Police Force data shows crypto users lost around $3.5M to separate supply chain attacks involving compromised Ledger hardware devices.
- Affected buyers are eligible for direct hardware replacements or store vouchers once they contact Trezor Support and retain their compromised units.
Cellular Implants Found in Wallets
Trezor urged customers who purchased hardware wallets from CryptoBilis on or after March 2026 to transfer their funds into newly created wallets immediately. Security disclosures filed with Trezor confirmed that a customer in Indonesia discovered an extra circuit board fitted between the main board and the screen of a Trezor Safe 5. According to hardware inspection reports, the hidden assembly contained an active cellular module and an antenna capable of broadcasting wallet backups over a mobile network.
The security breach came to light after Ledger investigated customer fund losses stemming from the same Southeast Asian reseller. Trezor removed CryptoBilis from its authorized vendor registry as soon as the initial logistics reports arrived. Company engineers chose to issue public safety warnings prior to physical lab verification to prevent immediate asset compromise.
Migration Protocols and Replacement Offers
Trezor instructed exposed users that simply reusing a seed phrase from a tampered device on a clean hardware wallet will not secure their funds. Users lacking immediate replacement hardware were advised to route assets through trusted software wallets or CEX accounts while verifying destination addresses. Anyone who purchased inventory through CryptoBilis during the designated risk window qualifies for a direct factory replacement unit or a full purchase voucher.
Singapore Police Force records revealed that local investors lost around $3.5M after purchasing physically compromised Ledger devices through unauthorized retail channels. Law enforcement officials confirmed that malicious internal components successfully extracted private keys and recovery phrases without triggering user warnings. Investigators have not yet identified the perpetrators orchestrating the regional supply chain infiltration.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.