Crypto Wallet: Trezor warns of a possible implant in a device sold by CryptoBilis

Coin Encyclopedia Improve your knowledge of cryptos

The security team received the report on October 28, through its responsible disclosure program. The owner describes an additional electronic board between the main board and the screen, equipped with a cellular module and an antenna.

According to this testimony, the device would read the information displayed, including the recovery phrase, then transmit it when the device is plugged in. Trezor has photos and interviewed the client by videoconference. However, laboratory analysis remains necessary to confirm these elements.

The client had already moved his funds before discovering the alleged implant. Furthermore, Trezor indicates that it has examined four other devices from CryptoBilis, without detecting manipulation.

The case follows the discovery, confirmed by Ledger, of implants in devices distributed by CryptoBilis. Trezor removed this reseller from its authorized network on October 9. The manufacturer exchanges with Ledger and SEAL 911, without attributing the incidents to the same authors.

Mark Karpelès, former head of Mt. Gox, also relayed the alert and offered to cover the cost of shipping suspicious devices for analysis. This initiative does not replace the review expected by Trezor.

As a precaution, the instructions apply to all models purchased from CryptoBilis since March 2026, including via stores supplied by this distributor.

For an already used device, Trezor recommends quickly transferring funds to a newly created wallet with a new recovery phrase. Restoring the old phrase on another device is not enough if it has been intercepted.

Without a reliable hardware wallet available, the manufacturer temporarily recommends a software wallet or exchange platform known to the user. It requires you to fully verify the receiving address before transferring.

An unused device must not be configured or receive an existing sentence. Trezor also advises against attempting a diagnosis by weighing or opening the case: these checks cannot rule out tampering.

Affected customers should keep their device and contact official support to obtain a replacement or voucher. Support never asks for the recovery phrase. The manufacturer also warns of the risk of false messages exploiting the incident.

At this point, Trezor has only one credible report, with no laboratory confirmation or reported loss. The alert warrants caution for affected buyers, without establishing that all devices distributed by CryptoBilis have been modified.

An editorial article. Le Journal du Coin, the first French-speaking news media on cryptocurrency, , and protocols.

Machine-translated from French