Security · High impactFan score 4 · Tier D
Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases
The Hacker News ·
The Brief
- Trezor confirmed that three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain a hidden implant.
- The implant is an extra circuit board that can copy the wallet's recovery phrase.
- According to the report, the implant reads the phrase from the wallet's screen and sends it onward.
Why it matters
Anyone holding funds on a Trezor Safe 5 bought from CryptoBilis could have their recovery phrase copied, which would let someone else take control of the funds.
Who’s affected
- Owners of Trezor Safe 5 wallets bought from reseller CryptoBilis
What to do
- Check whether your Trezor Safe 5 was bought from CryptoBilis.
- Follow Trezor's guidance for affected devices before storing funds on a wallet from this reseller.
- #hardware-wallet
- #trezor
- #supply-chain
- #crypto
- #security
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday. The implant reads the phrase from the wallet's screen and sends it over the mobile…
Timeline
Trezor confirmed hidden implants in Trezor Safe 5 wallets sold by reseller CryptoBilis
The Hacker News
Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases