Dealer network reduced by about 80%, Trezor confirms 3 Safe 5 devices contained malicious implants

Odaily reports: Bitcoin News posted on X platform that Trezor has confirmed that 3 Safe 5 devices sold by CryptoBilis contained malicious implants capable of stealing recovery phrases and passphrases. The implants intercept screen data and transmit it via mobile networks to servers controlled by attackers. Trezor stated that firmware 2.13.1 released on November 11 can neutralize the discovered implants, and its dealer network has been reduced by approximately 80%; currently no customers have reported stolen funds. Customers who purchased devices through CryptoBilis from March 2026 onward can apply for replacements, and affected users should still transfer their funds to wallets using freshly generated recovery seeds, as firmware updates cannot eliminate information that has already been compromised.