Trezor Warns Users After Tampered Hardware Wallet Found

A New Security Warning for Crypto Hardware Wallets

Hardware wallets are usually considered the safest way to store crypto. They keep your private keys offline away from online hackers.

However, popular manufacturer Trezor recently issued a serious security warning. The company discovered a physically tampered device sold by a former official reseller.

This discovery comes right after a massive $93 million security breach involving rival maker Ledger. Both incidents share a common link: a third-party reseller named Crypto Bilis.

What Happened to the Compromised Trezor Device?

Trezor announced that its security team received a credible report about a tampered Trezor Safe 5 wallet.

An alert customer bought the device in August through Tokopedia, an e-commerce platform in Indonesia. They noticed something suspicious and reported it to Trezor on October 28.

Trezor examined detailed photos and interviewed the customer. While official laboratory testing is still ongoing, Trezor is treating the report as credible.

As of now, no customer funds have been reported stolen from Trezor users related to this issue.

Inside the Attack: How the Hardware Was Altered

Physical supply chain attacks are rare because they require technical skill and physical access. In this case, attackers inserted a secret device inside the wallet body.

Here is how the rogue hardware implant works:

• An extra circuit board was installed between the main board and the display screen.
• The hidden board included a cellular communications module and an antenna.
• The module captures text shown on the screen, including your secret recovery seed phrase.
• When connected to power, the device wirelessly sends your data over mobile cell networks to attackers.

Because seed phrases are displayed on screen during setup, this malicious board steals backup words without needing your computer connected to the internet.

The Link to the $93 Million Ledger Breach

This Trezor discovery connects directly to a major security scandal that impacted rival wallet maker Ledger.

On October 9, Ledger began investigating losses from users who bought devices through Crypto Bilis in Southeast Asia.

Ledger confirmed that devices were physically altered before reaching buyers. Attackers stole roughly $93 million worth of crypto from affected Ledger users.

Ledger blamed an organized criminal group that likely spent millions of dollars orchestrating the complex supply chain attack.

How Trezor Responded to the Risk

When the Ledger attack broke on October 9, Trezor immediately revoked Crypto Bilis' reseller authorization.

Trezor also launched an investigation into products sold by that vendor. At first, Trezor found no compromised units with its brand.

To prevent future attacks, Trezor announced plans to drastically shrink its official reseller network starting January 1, 2027. This move gives Trezor strict direct control over device shipping.

Trezor is now coordinating with Ledger and security researchers to investigate the supply chain breach.

What You Should Do If You Bought From Crypto Bilis

If you bought any Trezor device from Crypto Bilis since March 2026, take these safety steps immediately:

1. Move your cryptocurrency to a safe new wallet right away.
2. Generate a brand-new recovery seed phrase on the safe wallet.
3. Do NOT reuse or restore your existing recovery phrase on another device.
4. If your device is unboxing or uninitialized, do NOT plug it in or use it.

Trezor stated affected customers can receive a free replacement wallet shipped directly from the factory or a voucher covering a replacement.

Broad Warning for All Models

Only a single Trezor Safe 5 unit has been confirmed as tampered so far. However, Trezor's safety warning covers all models bought from Crypto Bilis.

Trezor confirmed that no other authorized resellers have reported similar security issues.

Market Context and Safety Reminders

During this event, market prices reflected broader crypto movements with BitcoinBTC-5.41% trading around $76,489 (-5.36%) and EthereumETH-5.05% around $2,225 (-4.63%).

Past performance of digital assets is not a guarantee of future returns.

Always buy hardware wallets directly from original manufacturer websites to reduce supply chain security risks.