According to CoinMeta, a report from Trezor confirmed the discovery of hardware implants in 5 wallets, identifying 3 tampered devices sold through the distributor Cryptobilis between August and September 2026. These implants may have secretly captured mnemonic phrases and sent them to attackers. Firmware version 2.13.1 of Trezor has since blocked these identified implants, and the distributor network has been reduced by 80%. No cases of customer funds being stolen have been reported yet; affected users are advised to create new wallets and use new mnemonic phrases to transfer their funds. Trezor has relied on third-party distributors for many years, and it is unclear whether there are any other undetected compromised wallets.