2026-10-31
Trezor reports a possible hardware implant in a Safe 5 from a former reseller (unconfirmed): what owners should do
On October 30, 2026, Trezor published a notice saying its security team received, on October 28, a responsible-disclosure report of a hardware implant in a Trezor Safe 5. The device was bought in August 2026 from a company that was an official Trezor reseller in Southeast Asia until October 2026, through an online marketplace. The report describes an extra circuit board with a cellular module and antenna between the main board and the screen, said to read what the screen shows, including the wallet backup (recovery phrase), and send it over a mobile network. Trezor has not received the device, so this is unverified, and it says no funds are known to have been stolen. For devices bought from that reseller since March 2026, Trezor says: do not set up a new one, and if you already use one, create a new wallet with a new recovery phrase on a new device and move your funds. Our conclusion: this is a report, not a confirmed finding, but the steps are cheap compared with the risk, so follow the manufacturer's guidance if your device came from that reseller.