Security Alert: Suspected Hardware Implant Found in Safe 5 Sold by CryptoBilis, Says Trezor

October 30: Hardware wallet manufacturer Trezor posted that its security team received a responsible disclosure report alleging that a Trezor Safe 5 purchased from Southeast Asian official reseller CryptoBilis had a hardware trojan implanted inside. The device was purchased through Tokopedia in August 2026, and the report describes an extra circuit board with a cellular module and antenna between the motherboard and the screen, which is alleged to be able to read the screen display contents including seed phrases and transmit them externally via mobile network when the device is powered on. Trezor has not yet received the physical device for laboratory verification, but based on the customer's description and video communication, it is treating it as a credible report and issuing a warning in advance.

CryptoBilis is a Southeast Asian reseller that previously caused a large-scale fund outflow incident due to the sale of tampered Ledger devices, and Trezor removed it from its official reseller list on October 9. Trezor said no users have reported losses so far, and recommended that users who purchased devices through CryptoBilis since March 2026 migrate their assets to a brand-new seed phrase wallet as soon as possible, and never enter existing seed phrases on suspicious devices; affected users can contact the official team to receive a replacement device or voucher.