Trezor confirmed the presence of a spy chip in three Safe 5 hardware wallets purchased from CryptoBilis, a former authorized reseller in Southeast Asia. The devices were bought between August 20 and September 23, 2026, either directly from the reseller or through its stores on Tokopedia and Shopee. The 2.13.1 software update prevents the identified implants from capturing new data, but does not protect recovery phrases copied before its installation. Trezor has reduced its reseller network by approximately 80% and introduced new requirements concerning product provenance, storage and access control. Customers who purchased a device from CryptoBilis since March 2026 may request a replacement, refund or another solution depending on delivery constraints.
Source: Read the original article
