Trezor confirms 3 Safe 5 units have been compromised with hardware implants, leading to an 80% reduction in its dealer network.
On November 12, Trezor confirmed that three Safe 5 devices had been compromised with hardware implants. These devices were sold between August 20 and September 23 through the Malaysian distributor CryptoBilis. The implant was a circuit board sandwiched between the screen and the motherboard, which only copied the screen content and sent it to the attacker's server via the mobile network. Firmware version 2.13.1, released on November 11, disabled these implants, but affected users still need to change their mnemonic phrases. Trezor has reduced its reseller network by approximately 80% and is allowing customers who purchased through this channel to request replacements starting in March. No customers have reported losses so far. This reseller was previously involved in a Ledger device tampering scandal that resulted in the theft of over $86 million from Ledger users. (Source: AMBCrypto)