Trezor Warns CryptoBilis Buyers After Safe 5 Implant Report
Trezor has warned customers who bought its hardware wallets from reseller CryptoBilis since March 2026 to move their assets to a new wallet with a fresh recovery phrase, after a buyer reported a suspected implant in a Safe 5 device. The company says it has not examined the device and has not confirmed the alleged modification or its capabilities. The customer, in Indonesia, reported finding an extra circuit board in a Safe 5 bought through the Tokopedia platform in August. Trezor said it received the report on October 28 through its responsible disclosure program. The customer’s account described a board between the device’s main board and screen, fitted with a cellular module and antenna. Based on that account, the component may be able to read information displayed on the screen, including a wallet recovery phrase, and transmit it over a mobile network when the device is powered. Trezor said its assessment is based on the customer’s description, photographs and a video interview. The reported device has not yet been examined in the company’s laboratory, so the suspected implant and its functions remain unverified. Trezor advises affected customers to create a new wallet...