ChainThink report: According to official announcement, Trezor has released firmware update 2.13.1, rendering the currently discovered hardware implants incapable of further information interception.

However, Trezor still advises users who purchased devices through distributor CryptoBilis to create a new wallet using a new mnemonic and transfer funds, as the firmware update cannot protect previously compromised wallet backups. No user fund losses have been reported so far.

Investigations confirmed that three Trezor Safe 5 units were tampered with, all acquired between August 20 and September 23 via CryptoBilis’s Tokopedia and Shopee stores or direct purchases.

No tampering has been detected among other distributors or other device models. The implant is an additional circuit board installed between the motherboard and screen, capable of mirroring displayed content, identifying and storing mnemonics and passphrase data, then encrypting and transmitting it over mobile networks to servers controlled by attackers.

Trezor states it has reduced its distributor network by approximately 80%, with remaining partners required to adhere to stricter compliance standards; users who purchased Trezor devices from CryptoBilis since March 2026 are eligible to request replacement devices.