Trezor, a renowned manufacturer of cryptocurrency hardware wallets, has issued a critical warning to users regarding possible tampering of some Safe 5 devices purchased through the seller CryptoBilis. This cautionary message specifically targets those who acquired their devices from this vendor from March 2026 onwards, signaling a significant security concern.
Urgent Call for New Wallets and Unique Recovery Phrases
Mishaboar, a prominent figure in the Dogecoin community, has urged users who bought these devices during the concerning period to transfer their assets to an entirely new wallet without delay. Emphasizing the importance of security, Mishaboar highlighted that a previously unused recovery phrase must be generated during this process to ensure asset protection.
Mishaboar stressed that individuals who purchased Trezor from CryptoBilis post-March 2026 should swiftly migrate their funds to a completely new wallet equipped with a unique recovery phrase.
The advisory also made it clear that reusing a recovery phrase linked to a potentially compromised wallet is not advisable. Resetting the device or transferring the existing recovery phrase to another wallet alone will not suffice to secure the assets.
The Importance of Secure Private Keys
Mishaboar shed light on a common misconception about hardware wallets. It’s crucial to understand that cryptocurrency assets are not stored on the device itself. Instead, they reside on the blockchain, with the wallet solely storing private keys that unlock access to these assets. If these keys fall into the wrong hands, they can facilitate unauthorized asset access from anywhere worldwide.
The hardware wallet does not carry coins; the critical element is the private keys that grant access to blockchain-held assets.
Users are cautioned against assuming that merely replacing the device is a sufficient measure. Continuing to use the same recovery phrase could leave the security vulnerability unresolved.
Trezor Initiates Investigation
Trezor announced that the device in question has yet to reach the company for physical examination. However, the firm considers the report serious enough to notify customers in advance, despite ongoing reviews by its security team. Until now, no verified reports of fund losses from CryptoBilis customers have been reported to Trezor.
Another advisory is directed at users who have not yet set up their devices. These individuals are cautioned against utilizing an old backup or recovery phrase from an existing wallet and are advised not to share this information with anyone.
As a reputable name in the crypto hardware wallet market, Trezor’s Safe 5 model is recognized for its enhanced security features, making this potential risk a critical issue for users.
