Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 units sold through Southeast Asian reseller CryptoBilis carried malicious hardware implants designed to capture recovery phrases and beam them to attackers over cellular networks, according to BleepingComputer.
Trezor has shipped a firmware fix in response, but the patch only constrains what the device does from now on. It cannot neutralise the physical modification itself, and it offers no protection to anyone who already entered a recovery phrase into a tampered unit.
A compromise at the trust boundary
What sets this incident apart from the usual firmware advisory is where the tampering happened. The malicious components were fitted inside the devices before buyers ever saw them, somewhere along the reseller and distribution path — outside the threat model most hardware wallet users actually practise.
Signature checks on the host machine, PIN protection, careful handling of the recovery phrase, general network hygiene: all largely irrelevant here. The unit looks genuine, arrives in apparently normal packaging, and behaves normally during setup. The implant is simply part of the hardware.
Compounding matters, the recovery phrases leave over a cellular link rather than through the paired computer. The theft therefore produces no anomalous processes, no suspicious outbound traffic and no log entries on the buyer's own systems — endpoint inspection would surface nothing. For incident responders, a clean host is not proof that no tampering occurred.
What the fix does — and does not do
Trezor's firmware update constrains device behaviour going forward, but its limits deserve precision. Software cannot desolder a physical implant or undo the fact that a seed phrase was typed into compromised hardware. Any recovery phrase entered into one of the affected units must be treated as permanently exposed.
The only remedy is to generate a fresh seed on hardware known to be untampered and migrate funds to it. Trezor has issued guidance for checking Safe 5 units against its advisory; anyone who bought through a third-party reseller should perform that check against the advisory directly rather than relying on second-hand summaries of this story.
Provenance becomes part of the product
For Hong Kong's crypto holders, custodians and the IT teams supporting them, the operational lesson is that hardware provenance now belongs inside the trusted computing base. Distributors, resellers, logistics handlers — anyone with unsupervised physical access to stock — are effectively inside the security perimeter.
That argues for applying to hardware procurement the discipline organisations already apply to software supply chains: buy from authorised channels rather than whichever listing is cheapest, maintain a documented chain of custody, and carry out logged intake verification on arrival. For institutional custodians holding material balances, that extends to recording serial numbers at receipt and cross-checking them against manufacturer advisories as those are published.
The incident also undercuts a common assumption in self-custody circles — that a hardware wallet's security rests almost entirely on what the device does after purchase. Here the device itself was the attack surface, and no amount of firmware hardening would have helped the three people who received these units.
Three devices is a small tally, but the technique generalises far better than that count suggests: an implant fitted at the reseller defeats every defence the buyer can perform after the box arrives.
據 BleepingComputer 報道，加密貨幣硬件錢包製造商 Trezor 已證實，三部經東南亞經銷商 CryptoBilis 賣出的 Safe 5 裝置，被植入惡意硬件 implant，目的是截取 recovery phrase，並透過流動網絡傳送予攻擊者。
Trezor 已推出 firmware 修正以回應事件，但補丁只能約束裝置由現在起的行為，無法中和硬件上的實體改動，亦未能保護任何曾於被篡改裝置輸入 recovery phrase 的用戶。
信任邊界的失守
今次事件與一般 firmware 通告之別，在於篡改發生的位置。惡意元件在買家收到貨之前，已於經銷商及分銷路徑的某個環節被安裝在裝置之內——這完全在大多數硬件錢包用戶實際採用的 threat model 之外。
主機上的簽名校驗、PIN 保護、謹慎處理 recovery phrase、一般的網絡衛生習慣：在此幾乎全部失效。該裝置外觀與真品無異，包裝看似正常，設定過程運作如常，implant 本身就是硬件的一部分。
更棘手的是，recovery phrase 是透過流動數據鏈路傳出，而非經配對的電腦。因此盜竊過程不會產生異常 process、可疑的 outbound traffic，買家自己的系統亦不會留下任何 log entry——endpoint 檢查將一無所獲。對事件應變人員而言，主機「乾淨」並不能證明沒有遭篡改。
修正檔做得到——與做不到的事
Trezor 的 firmware 更新約束裝置往後的行為，但其局限必須說清楚。軟件無法拆除一個實體 implant，亦無法抹除 recovery phrase 曾被輸入受損硬件的事實。任何曾在受影響裝置輸入的 recovery phrase，都必須視作永久外洩。
唯一的補救方法，是在已知未被篡改的硬件上產生新的 seed，並將資金遷移過去。Trezor 已就如何按其通告檢查 Safe 5 裝置發出指引；經第三方經銷商購買的用戶，應直接根據官方通告進行檢查，而非依賴對本事件的二手摘要。
產品來源成為可信計算基準的一部分
對香港的加密貨幣持有人、託管機構以及支援他們的 IT 團隊而言，今次的運作教訓是：硬件的來源（provenance）如今已屬 trusted computing base 的一環。分銷商、經銷商、物流處理人員——任何能無監管地接觸存貨的人——實質上都處於保安範圍（security perimeter）之內。
這意味著硬件採購應套用機構在軟件供應鏈上已有的紀律：從授權渠道採購而非選最便宜的賣家、維護有文件記錄的 chain of custody、到貨時執行有 log 的收貨驗證。對持有大量結餘的機構託管方而言，更應在收貨時記錄序號，並在製造商發出通告時逐一核對。
事件同時動搖了自我託管圈子的一個常見假設——硬件錢包的安全性幾乎完全取決於裝置購入後的行為。今次正是裝置本身成為 attack surface，再完善的 firmware 強化，對收到這三部裝置的用戶也無濟於事。
三部裝置聽來數目不大，但這技術的可推廣程度遠超此數所顯示：在經銷商那一端植入 implant，即可擊破買家在拆盒之後所能執行的每一項防禦。