Markets › News › Technology

Trezor removes 80% of resellers after finding implants in three Safe 5 wallets

Trezor says hardware implants were found in three Safe 5 units purchased through a former reseller, prompting a major reseller-network reduction and firmware update.

Trezor says hardware implants were found in three Safe 5 units purchased through a former reseller, prompting a major reseller-network reduction and firmware update. This is an original Token Times brief synthesising 2 outlets (Bitcoin World, Crypto.news), with their figures cross-checked, plus live market data, as of Sat, 14 Nov 2026 10:30:01 UTC.

Why it matters

The discovery raises questions about hardware-wallet supply-chain security and the risks created when devices pass through third-party resellers. Reducing the reseller network and updating firmware are direct responses to concerns surrounding affected Safe 5 units.

Covered by 2 outlets over about 54 min — Token Times synthesises them all into one brief
  1. Crypto.news
    Trezor cuts reseller network 80% after finding 3 wallet implants ↗
  2. Bitcoin World
    Trezor Cuts 80% of Resellers After Three Safe 5 Implants ↗
Key takeaways
  • Three Safe 5 wallets reportedly contained hardware implants.
  • The devices were purchased from former reseller CryptoBilis.
  • Trezor reduced its reseller network by roughly 80%.
  • Bitcoin fell 2.59% over 24 hours amid extreme fear.
What the reporting agrees on

Bitcoin World and Crypto.news both report that Trezor found hardware implants in three Safe 5 hardware wallets purchased through former reseller CryptoBilis. Both outlets also identify an approximately 80% reduction in Trezor’s reseller network, while Crypto.news additionally states that the company released a firmware update following its Nov. 12 investigation update. The outlets do not contradict one another, although Crypto.news provides more detail about the firmware response and dates the investigation update, while Bitcoin World focuses more heavily on the scale of the reseller cut.

Trezor confirmed on Nov. 12, 2026 that three Safe 5 hardware wallets sold through former reseller CryptoBilis contained hardware implants. The company’s investigation covered a limited number of affected units, but the discovery triggered a substantial change in how Trezor distributes its products. Bitcoin World and Crypto.news both report that the hardware-wallet maker subsequently removed roughly 80% of its resellers.

The reseller reduction is the clearest common response described by the two outlets. Crypto.news also reports that Trezor released a firmware update after finding the implants. The supplied coverage does not specify the update’s technical contents, the number of devices potentially exposed beyond the three identified wallets, or whether every unit sold through CryptoBilis was affected.

The two reports agree on the central facts: three Safe 5 devices, the former CryptoBilis reseller channel, hardware implants and an 80% reduction in Trezor’s reseller network. Bitcoin World emphasizes the scale of the distribution-network change, while Crypto.news highlights the accompanying firmware update and references Trezor’s Nov. 12 customer communication. Neither outlet reports a conflicting figure or outcome.

The issue centers on hardware that stores users’ cryptocurrency, making the physical supply chain an important part of the security model. Three implicated wallets do not establish how many Safe 5 units were compromised, and the supplied reports do not identify broader sales totals. What is documented is that the devices passed through a reseller that Trezor has since described as former, following an internal investigation. The scale of the reseller cut indicates that Trezor treated the distribution relationship as significant beyond the three confirmed examples.

Live market data show a broadly weak backdrop: total crypto market capitalization stands at $2.34T, Bitcoin is down 2.59% over 24 hours, and the Fear & Greed index is at 13, labelled Extreme Fear. No cryptocurrency is named as a specific beneficiary or casualty of the Trezor incident, so the market figures provide broader risk context rather than a direct price reaction. The development to watch is whether the firmware update and reseller overhaul contain any further findings as Trezor’s investigation and customer guidance continue.

The market when this published · November 14, 2026
Total market cap₹220.77T
Bitcoin 24h-2.59%
Ethereum 24h-1.64%
BTC dominance57.9%
Fear & Greed13 · Extreme Fear
Cross-source data check

1 key figure independently matched across 2 outlets reporting this story.

80%2× corroboratedBitcoin World, Crypto.news

Token Times extracts the figures each outlet reports and flags the ones that agree. Numbers cited by only one outlet are attributed in the brief, not shown as corroborated.

Trezor removes 80% of resellers after finding implants in th — questions & answers

What did Trezor find in the three Safe 5 wallets?

Trezor confirmed that the three devices contained hardware implants. The affected wallets had been purchased through former reseller CryptoBilis.

How much of Trezor’s reseller network was removed?

Trezor reduced its reseller network by roughly 80%, according to both Bitcoin World and Crypto.news.

Did Trezor release a firmware update?

Crypto.news reports that Trezor released a firmware update after finding the implants. The supplied coverage does not describe the update’s specific technical changes.

Which outlets reported this story?

This is an original Token Times brief that synthesises reporting from Bitcoin World, Crypto.news, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

Token Times Newsdesk Data-stamped

Token Times's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · November 14, 2026 ⛓ Timestamped at Bitcoin block #975,780 sha256:b3e09c6e99d06c85
Corroborated across 2 outlets, reported over about 54 min — this is an original Token Times summary with live market data, not the original article.Crypto.news · Nov 14 07:15 ↗Bitcoin World · Nov 14 08:10 ↗

Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.