Security AlertHigh
Trezor says three Safe 5 wallets had hidden theft implants
Nov 13, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Trezor found malicious hardware implants in three Safe 5 wallets sold by CryptoBilis. The company says firmware 2.13.1 blocks the implants from capturing recovery phrases.
Key points
- Three Safe 5 wallets bought from CryptoBilis were compromised.
- Trezor released firmware 2.13.1 on Nov. 11.
- 48 CryptoBilis customers have contacted Trezor after its warning.
Why it matters
Anyone who bought a Trezor from CryptoBilis could be at risk if a recovery phrase was exposed. For households and small businesses holding crypto, this is a reminder to check where hardware wallets came from and update firmware quickly.
Who’s affected: Trezor Safe 5 owners who bought from CryptoBilis
What to do
- Update Trezor devices to firmware 2.13.1.
- Avoid using wallets bought from CryptoBilis until checked.
- Review recovery phrase handling and backups.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.