ChainThink reports that, according to the official announcement, Trezor has released firmware update 2.13.1, which prevents currently discovered hardware implants from intercepting information.
However, Trezor still recommends that users who purchased the device from the dealer CryptoBilis create a new wallet with a new mnemonic phrase and transfer their funds, as the firmware update cannot protect wallet backups that may have been compromised previously. There have been no reports of user fund losses to date.
The investigation confirmed that a total of three Trezor Safe 5 devices were compromised, all purchased between August 20 and September 23 through CryptoBilis’s Tokopedia and Shopee stores or directly.
No tampering has been detected in other distributors or other models. The implant is an additional circuit board installed between the motherboard and the screen, capable of replicating screen content, identifying and storing mnemonic phrases and password phrases, then encrypting and transmitting them via mobile networks to servers controlled by attackers.
Trezor has reduced its distributor network by approximately 80%, and remaining distributors must comply with stricter regulations; users who purchased Trezor from CryptoBilis since March 2026 may apply for a device replacement.