Crypto: Trezor removes 80% of its resellers after discovery of spy implants

Limit the risks. Trezor confirmed on November 12 the presence of a spy circuit in three Safe 5 hardware wallets purchased from CryptoBilis, a former authorized reseller in Southeast Asia. The manufacturer claims to have blocked the identified implants thanks to a software update. At the date of its balance sheet, no client had reported a loss of funds to it.

The three affected devices were purchased between August 20 and September 23, 2026.

Update 2.13.1 blocks, according to Trezor, data capture by identified implants.

The manufacturer has reduced its reseller network by around 80%.

Customers who have purchased Trezor from CryptoBilis since March 2026 can request a replacement.

Three Trezor Safe 5s contained a spy circuit

Since the first report in late October, 48 CryptoBilis customers have contacted Trezor. The manufacturer examined the first device in the laboratory and identified the other two from photos sent by their owners. Purchases were made directly from the retailer or via its stores on Tokopedia and Shopee. Trezor indicates that it found no traces of manipulation in the other devices examined.

The added circuitry could copy the information displayed on the screen, including the wallet recovery words. This sequence of words allows you to restore access to funds on another device. Trezor released version 2.13.1 of the Safe 5 internal software on November 11. According to the manufacturer, it prevents identified circuits from capturing new data on updated devices. However, a sentence copied before installation remains compromised.

Trezor tightens its distribution rules

The manufacturer has reduced its reseller network by around 80% and is imposing on partners that it maintains new requirements on the origin of devices, their storage and who is authorized to access them. Trezor specifies that the resellers excluded did not present an immediate threat, but that they did not meet these new requirements.

Customers who purchased a device from CryptoBilis from March 2026 can request a replacement, regardless of the model. Depending on delivery constraints, the manufacturer may offer another model with refund of the difference, delivery to another country or a full refund. It asks customers to keep their device and go through its official support.