Buy a Crypto Wallet, Get a Hidden Spy Chip Free

Hardware wallet maker Trezor has confirmed that three of its Trezor Safe 5 devices, sold via the third-party reseller CryptoBilis, contained a malicious extra circuit board. This hidden implant sits between the device's main board and screen, silently reading and copying the user's recovery phrase—the master key to their cryptocurrency—when it's displayed during backup or restoration. The implant then encrypts this data and sends it over a mobile network to an attacker-controlled server.

The impact is brutal: anyone who typed their recovery phrase into one of these compromised wallets may have already handed their crypto to thieves. Trezor released a firmware update (v2.13.1) that blocks new data capture, but it can't recover phrases already stolen. The company is now forced to advise customers who bought from CryptoBilis since March to move their funds to a *new* wallet with a *new* phrase. The ultimate takeaway is a stark reminder that in crypto, your security is only as strong as the most obscure link in your supply chain—and sometimes that link is a hidden spy chip sold by a sketchy reseller.