Trezor Urges Wallet Replacements After Hardware Implant Discovery

The sophisticated implant, discovered in late October, sits between the device’s main board and its screen. It is engineered to capture recovery phrases as they are displayed during setup and transmit the data via a mobile network whenever the wallet is powered. While Trezor has not yet performed a physical laboratory analysis of this specific unit, they have reviewed photographic evidence and conducted video interviews with the owner, deeming the threat authentic.

CryptoBilis was stripped of its authorized reseller status on October 9, following similar reports involving tampered Ledger devices that utilized identical cellular interception tactics. While no financial losses have been linked to Trezor devices specifically, the company is offering replacements or vouchers to all eligible customers who bought units from the reseller during the affected period. Users are cautioned against attempting to open or weigh their devices to check for tampering, as these methods are unreliable. Instead, owners should prioritize moving assets to a fresh wallet with a completely new recovery phrase, as any phrase previously entered into a compromised device must be considered public.