
Trezor warns of seed-stealing implant in CryptoBilis wallets
Trezor advises moving funds from CryptoBilis Safe 5 wallets after possible hardware implant discovered.
15 stories, newest first · one card per story

Trezor advises moving funds from CryptoBilis Safe 5 wallets after possible hardware implant discovered.

Trezor has not lab-tested the device but tells CryptoBilis buyers since March 2026 to move funds to a new recovery phrase.

Armory Castle used CVE-2026-102764 for file operations, then planted SAWFLY and BARECLAW on a few victims.

The roundup also covers an exploited Windows Shell flaw and an Ivanti Connect Secure zero-day chain.

Ledger halted Asia and Hong Kong reseller sales after tampered wallets stole seed phrases over LTE.

Hardware implants in Ledger wallets sold by authorized resellers enabled theft of about $102 million.

Spy chips in Ledger Nano X wallets sold via CryptoBilis stole seed phrases and over $86 million.

Joe Grand found hardware implants in Trezor wallets from unauthorized sellers that used preset seed phrases to steal crypto.

Tampered Ledger Nano X wallets with hidden LTE modems stole seed phrases, draining about $93 million.

Ledger confirmed spy implants in CryptoBilis-sold Nano X wallets captured seed phrases and drained users' cryptocurrency.

Ledger confirmed an unauthorized hardware implant in a CryptoBilis-sold wallet linked to cryptocurrency theft.

Ledger found a hardware implant in a CryptoBilis-sold wallet after reports of more than $86 million in stolen crypto.

Hardware implants in Ledger wallets sold via Southeast Asia reseller CryptoBilis drained over $93 million in crypto.
Ledger, a persistent 3D object memory, lifts HD-EPIC accuracy from 29.7% to 42.6% on egocentric video.

Attackers used malicious Google ads to phish Ledger users for cryptocurrency recovery phrases.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views