Trezor confirms crypto-stealing implants in three wallets, releases fix

Three Trezor Safe 5 hardware wallets sold through a Southeast Asian reseller were found to contain malicious circuit boards capable of capturing recovery phrases and transmitting them over cellular networks — a sophisticated physical supply chain attack. The root cause is a failure to sufficiently vet and monitor third-party resellers who handle sensitive security hardware before it reaches end users. This matters because hardware-level implants are extremely difficult for consumers to detect and can silently compromise cryptographic secrets from the moment of first use. Trezor's response — releasing firmware 2.13.1 to block the implants and pruning its reseller network — demonstrates that supply chain integrity must be enforced proactively, not reactively.