---
id: "CMP-202611-ykpygz"
page: "https://infrastack.ai/live/CMP-202611-ykpygz"
kind: "campaign"
aliases: []
title: "Trezor Safe 5 crypto wallets sold by reseller CryptoBilis had a hidden cellular implant that reads the recovery phrase off the screen and sends it to attackers (Trezor confirms)"
severity: "high"
cvss: null
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Trezor Safe 5", "fixed": ["firmware 2.13.1 (blocks known implants; does not protect already captured phrases)"], "vendor": "Trezor"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-13T14:23:17+00:00"
updated_at: "2026-11-13T14:24:44+00:00"
sources: [{"source": "analyst", "url": "https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html", "first_seen_at": "2026-11-13T14:23:17+00:00", "cites": ["https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html"]}]
exploit_sources: []
---

# Trezor Safe 5 crypto wallets sold by reseller CryptoBilis had a hidden cellular implant that reads the recovery phrase off the screen and sends it to attackers (Trezor confirms)

Link for people: https://infrastack.ai/live/CMP-202611-ykpygz (this .md is for agents)

Trezor confirmed on 12 Nov 2026 that three Trezor Safe 5 hardware wallets sold by former reseller CryptoBilis (directly or via its Tokopedia and Shopee stores, bought between 20 Aug and 23 Sep 2026) contain an extra circuit board with a cellular module and antenna between the main board and the screen. It captures the recovery phrase and passphrase from the screen and sends them over the mobile network to an attacker server. 48 customers' devices are being checked; no lost funds reported so far; Trezor says no other models or resellers' devices were found tampered. Firmware 2.13.1 (11 Nov) blocks the known implants but cannot protect phrases already captured. Trezor has cut its reseller network by about 80%.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- :Trezor Safe 5 affected range not listed fixed firmware 2.13.1 (blocks known implants; does not protect already captured phrases)

## Cause

How the attacker got in: not disclosed yet (unknown). Trezor confirmed that Trezor Safe 5 wallets sold by reseller CryptoBilis contain a hidden cellular implant that captures the recovery phrase, but the record does not say how the implant was inserted, so entry is unknown while the path is a tampered device bought by users.

How it reached others: their users installed or auto-updated it (tampered-install).

Last month's incidents with the same cause, and the full checklist: https://infrastack.ai/live/breaches.md#tampered-install

## How to check

Was the Trezor bought from CryptoBilis (including its Tokopedia or Shopee stores), especially from March 2026 onward? Confirmed tampered units were Trezor Safe 5 bought 20 Aug - 23 Sep 2026. Check firmware version is 2.13.1 or later. Physical sign: extra circuit board with cellular module/antenna between main board and display (Trezor Support can inspect). Other indicators (server addresses) unknown.

## Fix

If bought from CryptoBilis: move all funds to a new wallet with a newly generated recovery phrase (restoring the old phrase on another device does not help); do not set up an unused device from CryptoBilis and never type an existing recovery phrase into one; keep the device and contact Trezor Support for a replacement or refund. Everyone: update Trezor firmware to 2.13.1 and buy hardware wallets only from the maker or an authorised reseller.

## Timeline

- 2026-11-13T14:23:17+00:00 analyst https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html

## Documents

- [describes] @TheHackersNews: ‼️ BREAKING - Trezor confirms hidden hardware implants in 3 'Safe 5 crypto walle https://x.com/TheHackersNews/status/2121241157812490721
- [describes] Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases https://thehackernews.com/2026/11/trezor-confirms-hidden-hardware.html

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_