Hardware wallet incident trends｜Trezor confirms implants in three devices｜BTC nears $70,000; hold the risk line
My stance is defensive: get the facts right. The current trending topic on Binance Square is “TrezorConfirmsMaliciousImplantsIn3Safe5Devices.” In its official investigation update on November 12, Trezor confirmed that three of the Safe 5 devices it inspected contained additional hardware circuitry. All three were purchased from CryptoBilis between August 20 and September 23 this year. The company said it has received no reports of funds being lost from these three devices, and has found no similar implants in devices from other resellers it inspected or in other models. These are findings within the scope of the investigation so far; they do not mean that “all Trezor devices have been compromised,” nor can they be taken as a guarantee that uninspected devices are absolutely safe.
The attack mechanism matters more than the headline. Trezor explained that the circuitry was placed between the mainboard and the screen, where it could read information displayed on the screen and entered on the device, potentially capturing recovery words and passphrases before transmitting them over a mobile network. It did not alter the wallet firmware or secure element. Firmware version 2.13.1, released on November 11, can prevent the implants already found from continuing to capture information. But if recovery words were recorded earlier, upgrading the firmware cannot make the old seed phrase safe again. Trezor therefore still advises users who purchased devices from CryptoBilis to create a new wallet with a fresh seed and transfer their funds, and to arrange a replacement through official Trezor support channels. Do not enter your recovery phrase on websites impersonating customer support. Trezor also said it has reduced its reseller network by about 80%. This is a supply-chain measure and should not be interpreted to mean that every reseller removed from the network was involved in a breach.
For the BTC market, this kind of incident affects trust in self-custody, device purchasing, and asset-transfer procedures; it does not directly change Bitcoin’s protocol supply. It may lead some holders to temporarily favor exchange custody or pause transfers, but I have no evidence linking today’s decline to these three devices. At around 10:57 Beijing time, Binance BTC/USDT was about $70,355, down approximately 4.69% over 24 hours, with a low of $69,900 and a high of $73,884. Spot prices are already near the $70,000 level. Farside’s table of U.S. spot BTC ETF flows for November 12 provisionally shows net outflows of $47.7 million, but figures for IBIT and FBTC are still blank, so this cannot be treated as the complete end-of-day result. This looks more like broad pressure from capital flows and risk appetite, with the security news an additional risk to verify—not a ready-made reason to short.
My key levels are $69,900 and the psychological $70,000 mark. If BTC breaks below $69,900 and fails to reclaim it within an hour, the short-term rebound thesis is invalidated. A recovery toward $72,000–$72,800 may be possible only if it regains and holds above $71,200, and the final ETF figures do not deteriorate further. If I were trading it myself, I would sit out for now and consider only a spot long after confirmation, with no leverage. I would enter a test position using 2% of total capital only if the one-hour candle closes above $71,200 and a pullback holds above $71,000. I would take half off at $72,000, with a target of $72,800 for the remainder. I would set a stop below $70,400 and exit if the one-hour candle closes below that level. If $69,900 gives way before entry, the plan is canceled. For holders of affected devices, securing assets according to official guidance comes first; price trading comes later. If the conditions are not met, there is no trade or profit to review.
#TrezorConfirmsMaliciousImplantsIn3Safe5Devices #BTC
The above is solely my personal market observation and does not constitute investment advice.
My stance is defensive: get the facts right. The current trending topic on Binance Square is “TrezorConfirmsMaliciousImplantsIn3Safe5Devices.” In its official investigation update on November 12, Trezor confirmed that three of the Safe 5 devices it inspected contained additional hardware circuitry. All three were purchased from CryptoBilis between August 20 and September 23 this year. The company said it has received no reports of funds being lost from these three devices, and has found no similar implants in devices from other resellers it inspected or in other models. These are findings within the scope of the investigation so far; they do not mean that “all Trezor devices have been compromised,” nor can they be taken as a guarantee that uninspected devices are absolutely safe.
The attack mechanism matters more than the headline. Trezor explained that the circuitry was placed between the mainboard and the screen, where it could read information displayed on the screen and entered on the device, potentially capturing recovery words and passphrases before transmitting them over a mobile network. It did not alter the wallet firmware or secure element. Firmware version 2.13.1, released on November 11, can prevent the implants already found from continuing to capture information. But if recovery words were recorded earlier, upgrading the firmware cannot make the old seed phrase safe again. Trezor therefore still advises users who purchased devices from CryptoBilis to create a new wallet with a fresh seed and transfer their funds, and to arrange a replacement through official Trezor support channels. Do not enter your recovery phrase on websites impersonating customer support. Trezor also said it has reduced its reseller network by about 80%. This is a supply-chain measure and should not be interpreted to mean that every reseller removed from the network was involved in a breach.
For the BTC market, this kind of incident affects trust in self-custody, device purchasing, and asset-transfer procedures; it does not directly change Bitcoin’s protocol supply. It may lead some holders to temporarily favor exchange custody or pause transfers, but I have no evidence linking today’s decline to these three devices. At around 10:57 Beijing time, Binance BTC/USDT was about $70,355, down approximately 4.69% over 24 hours, with a low of $69,900 and a high of $73,884. Spot prices are already near the $70,000 level. Farside’s table of U.S. spot BTC ETF flows for November 12 provisionally shows net outflows of $47.7 million, but figures for IBIT and FBTC are still blank, so this cannot be treated as the complete end-of-day result. This looks more like broad pressure from capital flows and risk appetite, with the security news an additional risk to verify—not a ready-made reason to short.
My key levels are $69,900 and the psychological $70,000 mark. If BTC breaks below $69,900 and fails to reclaim it within an hour, the short-term rebound thesis is invalidated. A recovery toward $72,000–$72,800 may be possible only if it regains and holds above $71,200, and the final ETF figures do not deteriorate further. If I were trading it myself, I would sit out for now and consider only a spot long after confirmation, with no leverage. I would enter a test position using 2% of total capital only if the one-hour candle closes above $71,200 and a pullback holds above $71,000. I would take half off at $72,000, with a target of $72,800 for the remainder. I would set a stop below $70,400 and exit if the one-hour candle closes below that level. If $69,900 gives way before entry, the plan is canceled. For holders of affected devices, securing assets according to official guidance comes first; price trading comes later. If the conditions are not met, there is no trade or profit to review.
#TrezorConfirmsMaliciousImplantsIn3Safe5Devices #BTC
The above is solely my personal market observation and does not constitute investment advice.
