Dealer network cut by about 80%, Trezor confirms hardware implant in 3 Safe 5 devices

Odaily Report: According to Trezor monitoring, Trezor confirmed on November 12 that 3 Safe 5 devices had hardware implants, and the affected devices were sold between August 20 and September 23 through Malaysian distributor CryptoBilis. The implant is a circuit board sandwiched between the screen and the motherboard that only copies the screen contents (including seed phrases), encrypts them, and sends them to the attacker's server via mobile network. Because the implant does not modify the firmware or secure element, it is difficult to detect through routine verification. The firmware version 2.13.1 released on November 11 has rendered these implants ineffective, but it cannot protect backups made before the upgrade; users who purchased devices through this channel must still migrate to a wallet using a new seed phrase. Trezor will cut its distributor network by about 80% and said this move is not because partners breached trust. Users who purchased devices through this channel since March can apply for a replacement. As of now, no customers have reported losses. The same distributor was also involved in the Ledger device tampering case, in which more than $86 million was stolen.