Citing an update from Trezor relayed by WuBlockchain, the company inspected the devices of 48 users who contacted them and confirmed that 3 Trezor Safe 5 wallets contained malicious circuit boards. These devices were sold between August 20 and September 23, 2026, through the reseller CryptoBilis and its stores on Tokopedia and Shopee. The report states that the implants are capable of stealing recovery seeds and passphrases displayed on the screen and exfiltrating the data via cellular networks. Currently, no user funds have been reported stolen. Trezor stated that it has scaled down its reseller network by approximately 80%, tightened procurement and warehousing controls, and released firmware version 2.13.1 on November 11 to block data capture by the identified implants. Customers who purchased devices from CryptoBilis starting in March 2026 are eligible for a free replacement or refund.