If your hardware wallet’s recovery phrase may have been exposed, importing the same phrase into another device won’t solve the problem. Trezor’s security notice yesterday specifically warned about this.
On October 28, Trezor received a report that a Safe 5 purchased from CryptoBilis may have been fitted with an extra circuit board capable of reading the backup words displayed on the screen and transmitting them over a mobile network. As of the announcement on October 30, Trezor had not received the device for verification, nor had it received any reports of financial losses from customers of that reseller. A suspected implant and a completed laboratory verification are not the same thing.
Trezor removed this reseller on October 9. Its precautionary guidance applies to all Trezor models purchased from CryptoBilis since March 2026: if you’ve already used the device, migrate to a new wallet with a brand-new recovery phrase; if it hasn’t been initialized, don’t set it up, and especially don’t enter an existing backup phrase.
First check the seller on your proof of purchase, then contact Trezor through official channels. Never give your recovery phrase to anyone claiming to be customer support, and verify the full receiving address when migrating. Hardware wallets still carry supply-chain and operational risks.
Binance Wallet invitation code: MOLLY666
On October 28, Trezor received a report that a Safe 5 purchased from CryptoBilis may have been fitted with an extra circuit board capable of reading the backup words displayed on the screen and transmitting them over a mobile network. As of the announcement on October 30, Trezor had not received the device for verification, nor had it received any reports of financial losses from customers of that reseller. A suspected implant and a completed laboratory verification are not the same thing.
Trezor removed this reseller on October 9. Its precautionary guidance applies to all Trezor models purchased from CryptoBilis since March 2026: if you’ve already used the device, migrate to a new wallet with a brand-new recovery phrase; if it hasn’t been initialized, don’t set it up, and especially don’t enter an existing backup phrase.
First check the seller on your proof of purchase, then contact Trezor through official channels. Never give your recovery phrase to anyone claiming to be customer support, and verify the full receiving address when migrating. Hardware wallets still carry supply-chain and operational risks.
Binance Wallet invitation code: MOLLY666
