Implant found in Trezor devices from reseller CryptoBilis
The post (a researcher's retweet) reports that an implant has been found not only in Ledger devices but also in Trezor devices sold by reseller CryptoBilis since March 2026. This concerns a specific reseller's sales channel, rather than purchases directly from the vendor. The author invites owners of suspicious devices to contact him for analysis and offers to cover shipping. The post provides no evidence that anyone's funds have already been withdrawn; the vendor has published its own statement about the reported implant.
If a Trezor device was purchased from this reseller from March 2026 onward and holds funds, stop using the device. Create a new seed on a device known to be trusted (purchased directly from the vendor) and transfer funds to the new wallet's addresses; treat the old seed as compromised and do not restore it anywhere. Keep the device, as it may be needed for analysis. Waiting is dangerous here: if an implant is present, the keys may be known to a third party, and a firmware update does not undo that.
Source: x.com - sesi_the_man