According to CoinMeta, on November 12, it was confirmed that 3 Safe devices had hardware implants. These devices were sold by a Malaysian distributor, Cryptobilis, from August 20 to September 23. The implant was a circuit board placed between the screen and the motherboard, which merely copied the screen content and sent it to the attacker's servers via mobile networks. The 2.13.1 firmware release on November 11 rendered these implants ineffective, but affected users still need to replace their mnemonic phrases. Trezor has cut off about 80% of the distributor's network access and allows buyers who purchased through this channel since March to apply for replacements. So far, no customers have reported any losses. This distributor was also involved in a case of Ledger device tampering before, which resulted in over $86 million in losses for Ledger users.