Trezor is warning customers who purchased hardware wallets from former authorized reseller CryptoBilis since March to move funds off affected devices after a report of a suspected hardware implant in a Trezor Safe 5. The alert follows renewed attention on wallet tampering incidents that can expose recovery phrases—even when firmware appears unchanged. In a post on Friday, Trezor said a customer in Indonesia reported an unauthorized circuit board inside a Trezor Safe 5 bought on Tokopedia in August. According to the customer’s account, the suspected implant could capture information shown on the device’s screen, including wallet recovery phrases, and transmit that data over a cellular network. Key takeaways Trezor is advising customers who bought from CryptoBilis since March to transfer funds immediately after a suspected Safe 5 implant report. The suspected mechanism reportedly targets what appears on the device screen, including recovery phrases, rather than altering firmware. T...
New on-chain analysis is sharpening the picture of who benefited from Binance’s reported $6.3 billion hack—and how much of the stolen crypto remains under attacker control. According to blockchain analytics firm Bitquery, the perpetrators held about 18,270 Bitcoin across 19 addresses as of Friday, valuing the balance at roughly $1.4 billion . The findings arrive alongside details from Coinbase’s latest public filings and Binance’s ongoing response efforts. Bitquery’s traced Bitcoin holdings also exceed the amount Coinbase discloses holding for investment and operations—though not the portion Coinbase holds on behalf of customers. Key takeaways Bitquery traced 18,270 BTC (about $1.4B) linked to the Binance hacker across 19 addresses as of Friday. That total is 199 BTC higher than the combined 18,071 BTC Coinbase reported holding for investment and operations as of Sept. 30 (excluding customer balances). Binance said roughly $3B in stolen assets were frozen and pledged to co...