Trezor: Hardware wallets sold by CryptoBilis are suspected to contain embedded malicious circuit boards; users must immediately migrate their assets.

On October 30, Trezor announced that its security team received a responsible disclosure report alleging that a Trezor Safe 5 hardware wallet purchased through Southeast Asian authorized distributor CryptoBilis had been targeted by a supply chain attack. The device was allegedly implanted with an additional circuit board, cellular communication module, and antenna, allowing it to capture information displayed on the screen, including wallet mnemonic phrases, and transmit them via mobile networks.

The device was purchased through the Indonesian e-commerce platform Tokopedia in August 2026. Trezor has not yet received the unit for laboratory testing, but deems the report credible based on the user's account and video interview. Currently, there are no reports of user funds being stolen.

Trezor advises that users who purchased hardware wallets through CryptoBilis since March 2026 should migrate their assets as soon as possible to a wallet created with a completely new mnemonic phrase, and must not directly import the original wallet backup into another device. Eligible users may apply for a replacement device or a purchase voucher.