Replacing a hardware wallet and importing the original recovery phrase does not solve the risk that the phrase may have been exposed.
In a notice published on October 30, Trezor warned that users who purchased devices through CryptoBilis starting in March 2026 and have already used them should transfer their funds to a wallet created with a new recovery phrase. If a device has not yet been initialized, do not set it up or enter an existing recovery phrase.
The disclosure concerns a suspected hardware implant in a Safe 5. When the notice was published, Trezor had not yet received the device to confirm the finding, nor had it received any reports of related user fund losses. The suspected report should not be described as a confirmed, widespread compromise.
One easily overlooked point is that replacing a device and replacing a recovery phrase are two different things. If someone else has obtained the old phrase, they may still be able to control the same wallet after it is restored on a new device. Migrate using a new phrase generated in a secure environment, and verify the full receiving address. Do not trust anyone claiming to be customer support who asks you to provide your recovery phrase.
Self-custody comes with risks related to devices, backups, and user actions, so take care to verify everything during migration.
Binance Wallet invitation code: MOLLY666
In a notice published on October 30, Trezor warned that users who purchased devices through CryptoBilis starting in March 2026 and have already used them should transfer their funds to a wallet created with a new recovery phrase. If a device has not yet been initialized, do not set it up or enter an existing recovery phrase.
The disclosure concerns a suspected hardware implant in a Safe 5. When the notice was published, Trezor had not yet received the device to confirm the finding, nor had it received any reports of related user fund losses. The suspected report should not be described as a confirmed, widespread compromise.
One easily overlooked point is that replacing a device and replacing a recovery phrase are two different things. If someone else has obtained the old phrase, they may still be able to control the same wallet after it is restored on a new device. Migrate using a new phrase generated in a secure environment, and verify the full receiving address. Do not trust anyone claiming to be customer support who asks you to provide your recovery phrase.
Self-custody comes with risks related to devices, backups, and user actions, so take care to verify everything during migration.
Binance Wallet invitation code: MOLLY666
