Trezor advised all customers who purchased devices from CryptoBilis since March 2026 to immediately transfer their cryptocurrency to a new wallet with a fresh recovery phrase.

Overview Debates Related claims Topics Sources

Telegram trading bots like BloomTrading manage or hold user private keys to execute automated trades, creating central attack vectors for server-side vulnerabilities.

BloomTrading stated that no user private keys were compromised or accessed during the October 26, 2026 remote code execution exploit.

In September 2024, Telegram trading bot Banana Gun reported an exploit where 11 users lost approximately $3 million in Ether.

In October 2023, users of Telegram trading bots Maestro and Unibot lost a combined $1.1 million to smart contract router exploits.

BloomTrading attributed the October 26, 2026 security breach to a remote code execution vulnerability in a third-party software module.

Trezor announced plans to significantly reduce and restructure its global authorized reseller network beginning January 1, 2027, to strengthen supply chain control.

The reported hardware implant inside the Trezor Safe 5 allegedly reads information displayed on the screen, including the recovery phrase, and transmits it over a mobile network when plugged into power.

Ledger asked authorized resellers and distributors across Malaysia, Indonesia, Singapore, Thailand, Philippines, Vietnam, and Hong Kong to halt device sales following supply chain security compromises.

An Indonesian user reported finding an extra circuit board with a cellular module and antenna between the screen and main board of a Trezor Safe 5 bought from CryptoBilis via Tokopedia in August 2026.

Trezor is offering replacement devices shipped directly by the company or vouchers for a new wallet to customers who purchased Trezor devices through CryptoBilis.

Trezor stated on October 30, 2026, that it treats the hardware implant report as credible while arranging to examine the affected Trezor Safe 5 device in its laboratory.

The Singapore Police Force issued a public advisory on October 28, 2026, regarding tampered Ledger hardware wallets carrying malicious components that resulted in $3.5 million in reported losses.

Trezor reported on October 30, 2026, that it received a customer report regarding a suspected malicious hardware implant in a Trezor Safe 5 wallet purchased from reseller CryptoBilis.

Estimated cryptocurrency losses resulting from compromised Ledger hardware wallets distributed through reseller CryptoBilis reached $93 million.

Trezor advised users who have not yet initialized devices purchased from CryptoBilis to refrain from setting them up or entering existing recovery phrases into them.

Trezor stated that device weight is not a reliable method for customers to determine if a Trezor hardware wallet has been tampered with.

Trezor confirmed that as of October 30, 2026, no customer funds have been reported stolen in connection with the suspected Trezor Safe 5 compromise.

Trezor stated that four other CryptoBilis-sourced Trezor hardware wallets examined by the company showed no evidence of physical tampering.

Trezor stated on October 30, 2026, that it is currently reviewing its active reseller relationships across Asia following supply chain compromises.

In March 2026, criminals posing as police officers robbed a French couple in their late 50s of approximately $1 million worth of Bitcoin.