# Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Source: [The Hacker News](https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html) · 2026-11-13 · Security
Page: https://themorning.dev/story/trezor-confirms-hidden-implants-in-cryptobilis-sold-wallets-that-can-steal-recov-79815295aaa35652
Kind: security · Impact: high

## In brief

- Trezor confirmed that three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain a hidden implant.
- The implant is an extra circuit board that can copy the wallet's recovery phrase.
- According to the report, the implant reads the phrase from the wallet's screen and sends it onward.

## Why it matters

Anyone holding funds on a Trezor Safe 5 bought from CryptoBilis could have their recovery phrase copied, which would let someone else take control of the funds.

## What to do

- Check whether your Trezor Safe 5 was bought from CryptoBilis.
- Follow Trezor's guidance for affected devices before storing funds on a wallet from this reseller.

## Timeline

- 2026-11-12: Trezor confirmed hidden implants in Trezor Safe 5 wallets sold by reseller CryptoBilis

## Coverage

- [Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases](https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html) — The Hacker News, 2026-11-13

Tags: hardware-wallet, trezor, supply-chain, crypto, security

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev