Mishaboar insta a los compradores de Dogecoin (DOGE) a transferir sus fondos por la sospecha de un implante en Trezor

Crypto News and Tradfi News - COINOTAG · 2026-10-31T15:21:21.000Z

• El 30 de octubre, Mishaboar pidió a los usuarios que transfirieran sus fondos desde dispositivos Trezor comprados a CryptoBilis desde marzo de 2026. • Trezor reveló la sospecha de que se había instalado un implante de hardware en un dispositivo Safe 5 comprado a CryptoBilis en agosto de 2026. • Trezor afirmó que aún no ha recibido el dispositivo en cuestión para realizar un examen físico. Advertencia de Mishaboar a los compradores de CryptoBilis Mishaboar, una voz de larga trayectoria en materia de seguridad en la comunidad de Dogecoin, emitió el viernes 30 de octubre una alerta urgente dirigida a cualquiera que haya comprado una billetera de hardware Trezor al revendedor CryptoBilis en marzo de 2026 o después, un período que abarca los últimos siete meses: transfiera sus fondos de inmediato. Su advertencia se produjo tras revelarse la sospecha de que se había instalado un implante de hardware en un dispositivo Trezor Safe 5 comprado a ese revendedor. En una publicación en X, Mishaboar escribió que los usuarios afectados deberían transferir sus activos a una billetera completamente nueva, protegida por una frase semilla de recuperación generada desde cero, y crearla únicamente en un dispositivo y con un software de confianza. En los casos en que la billetera admita una frase de contraseña adicional, recomendó activarla y guardar esa frase de contraseña en copias de seguridad sin conexión. Presentó la medida como urgente, no preventiva.

• Mishaboar on October 30 told users to move funds from Trezor devices bought from CryptoBilis since March 2026.
• Trezor disclosed a suspected hardware implant in a Safe 5 device purchased from CryptoBilis in August 2026.
• Trezor said the reported device has not yet been received for physical examination.
Mishaboar's Warning to CryptoBilis Buyers
Mishaboar, a long-standing security voice in the Dogecoin community, issued an urgent advisory on Friday, October 30, aimed at anyone who bought a Trezor hardware wallet from the reseller CryptoBilis in March 2026 or later, a window stretching back seven months: move your funds at once. His warning followed the disclosure of a suspected hardware implant in a Trezor Safe 5 device purchased from that reseller. In a post on X, Mishaboar wrote that affected users should transfer their holdings into a completely fresh wallet secured by a recovery seed generated from scratch, creating that wallet only on a device and software they trust. Where the wallet supports an additional passphrase, he advised enabling it and storing the passphrase in offline backups. He framed the move as urgent, not precautionary.
A second instruction covered seed reuse. A recovery seed that might have been compromised must never be used again, he cautioned, because a factory reset or moving the same seed into another wallet leaves the holdings exposed to whoever copied the keys. Mishaboar also set out a principle that many holders of Dogecoin (DOGE), the original memecoin, still find surprising: hardware wallets do not contain coins. The coins live on the blockchain, and a wallet stores only the private keys that let a user access and spend them. Anyone holding a copy of those keys can move the funds from anywhere in the world, on any device into which the keys have been imported, without needing the physical device or the owner's phone. For readers following the Dogecoin price, the point matters: the token and its chain are untouched by the advisory, which concerns only the hardware and the resale channel that hold users' keys.
Trezor's Disclosure on the Safe 5
Trezor's own security update supplies the background and sets the scale of the concern. The vendor's update, published before Mishaboar's post, identified the affected model and the reseller involved. According to the company's account, it learned through responsible disclosure, the practice of reporting a security flaw privately so the vendor can investigate before it is made public, that a Trezor Safe 5 device bought from CryptoBilis in August 2026 carried a suspected hardware implant. The disclosure states that the reported unit has not yet been received for physical examination. Trezor nonetheless deemed the report credible enough that customers should be notified while its security team carries on with the investigation. The August 2026 purchase date sits inside the window Mishaboar flagged, which reaches back to March 2026.
So far, the company said, no buyer who purchased from CryptoBilis has reported losing funds, a caveat it framed carefully given that the physical examination has not taken place. The operational advice for anyone still holding an unopened device is equally specific: such a device should never be initialized using an existing wallet backup, and the recovery phrase must never be shared with anyone, whatever the circumstances. Mishaboar, meanwhile, is not a one-issue voice on Dogecoin safety. His recent record includes objections to the Dogecoin Labs developer-account takeover and a rebuttal of DogeOS performance claims, both of which placed him at the center of community debates over project security.
A Supply-Channel Problem, Not a Protocol Flaw
The load-bearing document here is Trezor's own disclosure, and its wording is narrower than the alarm might suggest: it covers one Safe 5 unit, bought in August 2026, whose implant remains suspected rather than confirmed, and it notes the device has not yet reached Trezor for inspection. Independent verification is still pending, which keeps the episode in the category of credible suspicion rather than proven compromise. That makes this a warning about a supply channel, the path a device takes from factory to customer, rather than a defect in Dogecoin's code or in hardware wallets as a class. The caution carries weight because Trezor publicized the report before completing its own examination. Buyers who source devices through third-party resellers, whether they hold Dogecoin or any other altcoin, now have a concrete reason to check a device's provenance, and the same rigor that goes into blockchain security audits applies to the hardware itself.