Trezor cryptocurrency wallet found with hidden password-stealing chip
A supply chain tampering incident involving Trezor Safe 5 hardware wallets reveals how physical modifications can compromise device security. An extra circuit board was discovered inside a reseller-supplied unit, report
A supply chain tampering incident involving Trezor Safe 5 hardware wallets reveals how physical modifications can compromise device security.
An extra circuit board was discovered inside a reseller-supplied unit, reportedly built to transmit recovery phrases over a mobile network.
Trezor has issued warnings and support guidance for impacted buyers.
Trezor announced the incident on October 30, two days after it was notified by a customer in Indonesia. The buyer had purchased the wallet in August through the Tokopedia platform from reseller CryptoBilis. Trezor terminated its cooperation with the reseller in Southeast Asia on October 9. It is noted that Ledger had previously detected similar unauthorized interventions on its own devices purchased from the same reseller.
Who is at risk and what should they do?
Trezor's warning applies to anyone who purchased a device from reseller CryptoBilis from March 2026 onwards. The company recommends that users move their funds to a safe place.
Users are urged not to attempt to test their devices themselves by opening or weighing them. Those who contact the company's support will receive a new device or a compensation voucher.
β³
READ ALSO
HACKS.GR / RELATED
Cyber ββAttacks & Data Breaches
Hackers linked to North Korea allegedly stole $6,3 billion from exchange Binance
β
Finally, on October 28, Singapore police issued a warning about tampered devices from another company that were found in the local market.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
β
end of article
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.