Trezor: Confirmed that 3 Safe 5 devices contain malicious implants

Bitcoin News posted on platform X that Trezor confirmed that three Safe 5 devices sold by CryptoBilis contained malicious implants that could steal recovery phrases and password phrases. The implants intercept screen data and send it to servers controlled by attackers via mobile networks.

Trezor stated that the released firmware 2.13.1 can disable the discovered implants, and its dealer network has been reduced by about 80%; currently, no customers have reported stolen funds. Customers who purchased devices through CryptoBilis starting in March 2026 can apply for replacements, and affected users should still transfer their funds to wallets using a brand new recovery seed, as firmware updates cannot eliminate previously leaked information.