Trezor urged customers who bought its hardware wallets from former reseller CryptoBilis since March to move their funds, after a report of a suspected unauthorized circuit board in a Trezor Safe 5 bought on Tokopedia in August. According to the report, the device could capture screen information, including wallet recovery phrases, and transmit it over a cellular network. Trezor has not yet examined the device and has received no reports of losses, and described sales through the reseller as “very small” without providing figures. The company is reviewing its hardware protections, as seals and packaging are not sufficient on their own, and plans to reduce its reseller network, announced on October 13. Earlier, Ledger wallets sold through CryptoBilis were found to contain an implant, and security researcher Joe Grand had alerted Trezor in August about tampered wallets.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
cryptocybersecurityTrezorhardware wallets
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/29/2026 | 77,991.89 |
| Change that session | -4.12% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Bitcoin Wallet Maker Keystone Pulls Devices as Stolen Key Opens Door to Fakes
Keystone will destroy 18,835 unsold hardware wallets and has suspended shipping of unshipped orders after an attacker obtained the permanent factory WebAuth key used to verify its devices are genuine, which could let counterfeit wallets pass its own check. The breach, detected October 20, exposed 25,964 buyer records from its Shopify store covering 2024 to 2026, including names, contact details and shipping addresses, but Keystone says recovery phrases and private keys were not involved and devices delivered before October 20 are unaffected. Keystone admitted that an automated deletion tool failed, leaving records that should have been erased under its 180-day policy. It has cut retention to 90 days and expects erasure to finish on November 3. The company also warned that scammers posing as 'recall' staff are asking customers to ship devices to them.
- Keystone breach deepens: Hackers stole key used to verify wallets as genuine
Hardware wallet maker Keystone said an attacker who breached its website last week also stole a key used to verify device authenticity, which could let counterfeit wallets pass its checks. The company plans to destroy 18,835 devices in inventory that contain the compromised key and has suspended shipments of devices using it. It disclosed that 25,964 buyer records from 2024 to 2026 were stolen after a faulty data-erasure tool failed to delete them, and that 12,873 checkout records held by Shopify were also taken. Devices made and delivered before the Oct. 20 incident are considered safe, but the authenticity of later devices cannot be guaranteed. The breach follows other security issues at hardware wallet makers this year, including Ledger, Coinkite and Trezor.
- Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis
Ledger said LTE-enabled implants in wallets sold by CryptoBilis captured the 24-word recovery phrases shown on device screens during setup and sent them over cellular networks via an eSIM, without compromising the secure chips or altering transactions. The issue came to light after crypto losses involving devices sold through the reseller, which is listed as authorized in Indonesia, Malaysia and the Philippines. Blockchain investigator Specter estimated losses could exceed $86 million, while Yfarmx put them at $103 million, though Ledger has not confirmed a total. CryptoBilis halted sales of all hardware wallet brands in those three countries, Trezor said it received no reports of tampered devices but removed the reseller, and OneKey terminated its authorization and offered free replacements for devices bought from CryptoBilis in 2026. Ledger is also examining reports beyond the reseller, including European cases involving devices bought from MediaMarkt, but has not confirmed a link.
- Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5
Trezor said it received a credible report of a hardware implant in a Safe 5 bought from reseller CryptoBilis in August 2026, though it has not yet examined the device. The reported implant reads the wallet backup from the screen and sends it over a mobile network, similar to Ledger's case, and the details have not been verified by Trezor. Trezor urged anyone who bought its wallets from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase, and said no buyer has reported a loss of funds. Trezor removed CryptoBilis as a reseller on October 9 and has inspected 4 devices bought from it without finding evidence of tampering.
- Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain
Ledger has asked resellers and distributors in six Southeast Asian countries and Hong Kong to suspend sales and pull its hardware wallets from shelves while it investigates devices fitted with a hidden implant. The implant reads the 24-word recovery phrase during setup and sends it out over LTE, so anyone holding that phrase can move the wallet's funds. All confirmed losses involve devices sold through CryptoBilis, a regional reseller, and Ledger has not verified any drain linked to devices bought elsewhere, nor sees any indication its own systems were compromised. Onchain investigator Specter has traced more than $86 million in suspected thefts, a figure Ledger has not verified. MediaMarkt Saturn stopped selling Ledger devices after a German customer reported an implant, though no funds were lost, and rival Trezor will end reseller authorizations on January 1, 2027 as a precaution.
- Trezor reduces resellers as a ‘preventative step’ amid Ledger tampering reports
Hardware wallet maker Trezor said it will reduce its number of resellers as a “preventive step” following reports that malicious implants were found in competitor Ledger’s devices. Chief commercial officer Danny Sanders said certain resellers will be removed from the authorized list on January 1 and will stop receiving Trezor shipments from Tuesday. Trezor said there is “not a single piece of evidence” that its own devices have been compromised, while Ledger confirmed that at least one device sold by reseller CryptoBilis in Southeast Asia contained an unauthorized implant that captured recovery phrases. Researchers estimate losses of between $72 million and $86 million, though Ledger has not confirmed the total number of affected users or value lost. CryptoBilis suspended all hardware wallet sales, and the parent company of MediaMarkt removed all Ledger products from its stores and online platforms.
Related markets
Latest news
- Silver Falls Below $50/Ounce: What Lies Ahead?
Silver has broken below $50/ounce and is weakening more than gold, with prices hitting the lowest levels since the start of the year. A Metals Focus report expects the market to shift from deficit to surplus in 2027, as inventories rise and jewelry and industrial demand slow; high prices and efforts to use less silver, especially in solar panels, also weigh on demand. Interest rates add pressure: the Fed held rates in October but signaled readiness to tighten further, markets price an 80% chance of a 25 basis point hike in December, and rising yields reduce the appeal of precious metals. London vault stocks reached 932 million ounces, with about 267 million ounces available for trading excluding ETP holdings, nearly double the October 2025 low, as silver held in ETPs fell by about 60 million ounces this year. The report says silver will likely keep following gold over the next 12 months, and the outlook could change if expectations of tighter monetary policy in 2027 ease.
- 1 Big Winner and 1 Loser From the Upcoming Anthropic IPO
Reports suggest Anthropic's upcoming IPO could beat the record for the largest in history. The author expects Broadcom to benefit, as Anthropic reportedly plans major AI infrastructure build-outs and has a five-year agreement worth $161.2 billion for TPU-based compute capacity with Broadcom. Broadcom projects $115 billion in AI revenue for fiscal 2027 and $230 billion for fiscal 2028, though a growing AI chip share could lower gross margins. In contrast, Recursion Pharmaceuticals, founded in 2013, still has no drug on the market, and Anthropic, which says nine of the 10 largest pharma companies are among its clients, could erode its AI drug-discovery edge. The author finds Recursion's stock unattractive given clinical and regulatory uncertainty.
- After Eli Lilly’s Explosive Earnings Report, Is It Too Late to Buy the Stock?
Eli Lilly reported third-quarter revenue up 39% to more than $24 billion, driven mainly by its weight loss portfolio. Mounjaro sales rose 65% to over $10 billion and Zepbound climbed 49% to $5.3 billion, while 40% of new patients starting an oral obesity medicine chose Foundayo. Lilly holds 63% of the U.S. market, and the stock is trading at a record high above $1,300, at 42x forward earnings estimates versus more than 70x in 2024. The article argues the weight loss market still has room to expand, since only 3% to 10% of potential U.S. patients access weight loss care, and that late-stage candidates such as retatrutide add to the growth outlook.
- Nvidia (NVDA) CEO Jensen Huang Reportedly Targeted In Chinese Espionage Plot
Reports say Nvidia CEO Jensen Huang was targeted in an alleged Chinese espionage plot. The reported operation has prompted fresh questions from US lawmakers about potential security vulnerabilities in Nvidia's AI chip development. Regulators and legislators are weighing the incident against existing restrictions on Nvidia's advanced AI chip exports to China. The article argues the episode could reinforce Washington's view of Nvidia as critical AI infrastructure, while also potentially hardening support for stricter licensing and oversight of where its top-end platforms are deployed, which could cap part of the addressable market.
- Shopify Stock Is More Than 10% Below Its Record. Should You Buy Before Its Nov. 3 Report?
Shopify (SHOP) closed at a record $179.22 on Oct. 12 but now trades about 12% below that level, including a roughly 6% drop on Friday. The e-commerce software company reports third-quarter results before the market opens on Nov. 3, after management set guidance in August for revenue growth in the low thirties, gross profit growth in the mid-to-high 20s and a free cash flow margin in the high teens to low 20s. The author notes Shopify has met or beaten its guidance all year, with revenue growth of 34% in both the first and second quarters, though the third quarter faces a tougher comparison. Shares fell about 16% on May 5 even though first-quarter revenue growth beat the outlook, and rose about 17% after the August report, suggesting investors judge more than guidance beats. At roughly 86 times trailing free cash flow, the author argues the drop does not change much and prefers to wait for the report and see where shares settle afterward.
- 5 Best High Growth Stocks Outside Big Tech
Market growth is unusually concentrated in a few mega-cap tech stocks, with ten AI-related names making up over 40% of the S&P 500's market capitalization. The article argues non-tech growth stocks merit a look, but growth must be weighed against margins, debt, customer concentration and capital intensity. Analysts expect the "Magnificent Seven" to grow third-quarter earnings 20.3% year over year, versus 27.7% for the other 493 S&P 500 companies, suggesting earnings momentum is broadening. Netskope is cited as an example: revenue rose 29.2% to $220.5 million, yet trailing EBITDA stayed negative at $721 million. The list screens non-tech stocks with market caps above $20 billion and at least 25% five-year EPS growth.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.