CryptoBilis update We've been made aware, through responsible disclosure, of a single hardware implant in a Trezor Safe 5 device bought from the reseller CryptoBilis in August 2026. No CryptoBilis buyer has reported a loss of funds to us. IMPORTANT: If you bought a Trezor from CryptoBilis from March 2026 onwards, we know this is unsettling. Here’s what to do: Already using it? Move your funds to a newly created wallet with a new seed as soon as possible. Do not reuse the old seed in any wallet, hardware or software. If you don’t have another secure hardware wallet available, we recommend temporarily migrating your funds to a software wallet or an exchange you are familiar with. Not set up yet? Don’t set it up, and never enter your existing wallet backup on it. We haven’t received the device to confirm this report, but based on the customer’s description, we’re treating it as credible and sharing it now so customers who purchased a Trezor via CryptoBilis can secure their funds as a precaution. Our security team will examine the device as soon as it arrives. On October 9, 2026, we removed CryptoBilis as a reseller following reports of tampered Ledger devices sold through it. Since then, we have been inspecting Trezor devices that customers bought from CryptoBilis and have found no signs of tampering on any of the four devices we’ve received so far. NEVER share your wallet backup (recovery phrase) with anyone. Trezor Support will never ask for it. If you are affected by this incident, please keep your CryptoBilis device and contact Support to receive a new Trezor hardware wallet: We're investigating and will post updates here as soon as we know more. Thank you to the customer who reported this through our responsible disclosure program, and to @SEAL_911 for working alongside our teams on the response. Reports and engagement like this help us protect everyone else. For more information, visit our blog:

Wallets started on paper. Now they’re learning to work with AI agents. At #TOKEN2049#, we sat down with @MetaMask and @Trezor at our booth to talk about where wallets are heading: simpler cross-chain swaps, smoother onboarding, and AI agents that act for you while you still sign off on every move. 🎙 Francesco, Director of DevRel, @MetaMask 🎙 Denis, Software Product Lead at @Trezor 🎙 Yana, our Head of B2B & Partnerships Moderated by Kelvin Sparks of @TheBlockCo One point they all agreed on: trust comes first, features second. Would you let an AI agent use your wallet? Watch the full interview:

Trezor now supports Arc, the stablecoin-native network. Send, receive, buy, and swap on Arc directly in Trezor Suite. Your keys stay offline, and every transaction is confirmed on your Trezor's Trusted Display before you sign.

A great experience at last week’s HSC Asset Management conference in Singapore! Thank you to everyone who stopped by to connect with us. It was a pleasure meeting so many people and exchanging ideas. @mpost_io @StellarOrg

Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with. Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised. This is a preventive step, taken out of an abundance of caution. We also want to thank everyone involved for the cooperation, and for the years of work putting Trezor in people’s hands.

How much onchain value is still one bad key away from disappearing? 🔐 Trezor & Stellar's Stage. The panel is live on what it actually takes to secure onchain assets at institutional scale. Moderator: ▫️Pauline Barnades (@PauChan23), Technical Product Manager, @lavanetxyz Foundation Speakers: ▫️Aneirin Flynn, Co-Founder & CEO, @getfailsafe ▫️Daniel Lee, CEO, @CactusCustody ▫️Faraj Abutalibov (@faraj_abut), Sr Advisor Middle East, @StellarOrg Foundation ▫️Jag Foo (@blocksaurus), Chief Security and Policy Officer, @Safeheron ▫️Jan Setina, Product Lead, @Trezor Security isn't a feature, it's the whole product 🔒

Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link. We have taken down the domain, and we are investigating the situation, including how the hackers got access to our legit domain.

Clear Signing works across supported Ethereum and EVM-compatible networks through Trezor Suite, @WalletConnect, and Trezor Connect, with no additional software or settings required. Read more:

Two days ago, we received an update from our shipping provider, ShipMonk. We're deeply saddened to share the news that the recent data breach affects more customers than originally thought. Another 67,000 customers from the US who ordered between November 2019 and August 2021 were affected, with their full details (name, email, phone number, shipping address, order number) exposed. All affected customers have been emailed directly. If you didn’t receive an email, then you are not affected. Throughout our entire relationship with ShipMonk, we repeatedly requested and received written assurance confirming the deletion of the data, in line with our contract, data policy, and past communications. We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems. Trezor systems were not compromised, and your device is secure. But please be alert for fake emails, phone calls, fraudulent letters, and potential risks to physical security. NEVER share your wallet backup with anyone or type it into a website. We’re terribly sorry to everyone affected. We take this matter very seriously and are working to ship anonymous delivery ASAP, so you can protect your personal information when placing an order. For more information, visit our blog:

HyperEVM is now supported on Trezor. ️ Manage HYPE and HyperEVM assets while keeping your keys offline and every transaction verified on your Trezor device. Try it now! @HyperliquidX

Today is a BIG day 👀 We’re hosting a @Trezor workshop with local ČVUT students, giving them their first hands-on experience with our Model T devices, becoming their own banks. And yes the “plug and play” vibes are real. Real devices. Real experience. Learning by doing. This is how crypto education should be.

We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026. The data exposed: - Full names - Shipping addresses - Phone numbers - Email addresses The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy). All affected customers have been contacted separately by email. Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts. NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels. We are deeply sorry to the community and those affected. We are investigating this situation and will post updates on our blog: