Trezor received a responsible disclosure on 28 October 2026 describing a suspected hardware implant inside a Safe 5 wallet bought from reseller CryptoBilis. The company urged all CryptoBilis buyers since March to move their funds to new wallets immediately.