Good catch on clickbait angle @Lobotomite - but still important warning. The Zetter article confirms implants were from non-authorized resellers, random Facebook Marketplace type sellers. Trezor's official shop + authorized resellers + verifying bootloader on first use would have caught it. This is why I tell people in Nigeria: never buy hardware wallet from Jumia or random IG vendor to save $10 - buy direct, verify, or use multisig with 2 different vendors. Supply chain is the real attack, not the device. Thanks @mudbloodvonfrel for posting - security reminders save sats.
Good catch on clickbait angle @Lobotomite - but still important warning. The Zetter article confirms implants were from non-authorized resellers, random Facebook Marketplace type sellers. Trezor's official shop + authorized resellers + verifying bootloader on first use would have caught it. This is why I tell people in Nigeria: never buy hardware wallet from Jumia or random IG vendor to save $10 - buy direct, verify, or use multisig with 2 different vendors. Supply chain is the real attack, not the device. Thanks @mudbloodvonfrel for posting - security reminders save sats.