Trezor Wallet Warning Highlights Supply-Chain Risks
Trezor warned customers about a suspected hardware implant in a Safe 5 purchased through reseller CryptoBilis, which it removed from its authorised network on October 9. A buyer reported finding an extra circuit board, but as of October 30 Trezor had not received the device for laboratory testing. The company said it had no reports of customer losses. Eligible customers who bought CryptoBilis-supplied devices from March 2026 can request a replacement or voucher. Trezor advises affected owners to create a wallet with a fresh recovery phrase and transfer their funds; restoring an old phrase would not protect assets if it had been exposed. It also warned customers to watch for phishing attempts and said four other returned devices showed no signs of tampering.
The warning brings renewed attention to hardware-wallet supply-chain security. Trezor said the suspected implant appeared similar to one in a separate Ledger case, but there is no public evidence linking the incidents or their attackers. Ledger confirmed an implant in an affected device that could capture a 24-word recovery phrase through the screen connection, without disrupting the security chip, operating system or normal signing functions. Researchers published overlapping estimates of losses linked to the Ledger investigation: Arkham traced $95.35 million across 1,486 addresses on October 29, while Bitquery counted $102 million across 335 wallets and six blockchains on October 16. These estimates are separate, not additive, and are not final manufacturer-confirmed figures. No losses have been confirmed in the Trezor case. The incidents underscore that verifying a security chip is not the same as checking an entire wallet for added components.
Neutral
The reports describe a serious security and supply-chain concern, but neither summary identifies a direct impact on the price of a specific cryptocurrency. Trezor says it has received no reports of losses connected to the suspected implant, and the device has not yet undergone laboratory testing. The separate Ledger loss estimates may intensify concern about self-custody and wallet security, but they do not establish losses in the Trezor case or show a direct price catalyst for a coin. In the short term, affected users may move funds, review wallet security and respond to phishing risks; broader traders may briefly react to negative security headlines. Over the longer term, confirmed evidence of widespread compromise could weaken confidence in hardware-wallet providers and add pressure to crypto sentiment. On the information available, however, that risk is not specific to a named cryptocurrency, so the expected price impact on any mentioned coin is neutral.