According to CoinMeta, Wu said that hardware wallet manufacturer Trezor has issued a statement indicating that the investigation into the incident of hardware implantation in devices sold by distributor Cryptobilis has made progress. To date, 48 users have had their devices checked, and it has been confirmed that three of these devices, which were sold between August 20 and September 23, 2026, through Cryptobilis and its stores Tokopedia and Shopee, had additional circuit boards implanted. This malicious hardware is hidden between the motherboard and the screen and can steal the mnemonic phrases and password phrases displayed on the screen, transmitting them back to the attacker's server via mobile networks. So far, there have been no reports of user funds being stolen. To address supply chain risks, Trezor has reduced its dealer network by about 80% and implemented stricter procurement and warehousing controls for the remaining dealers. On November 11, a firmware update version 2.13.1 was released to block the data capture from the implanted devices in the existing batches. It was also announced that users who purchased devices from Cryptobilis starting from March 2026 will be eligible to apply for a free replacement or a refund.