Trezor warns of suspected theft implant in a Safe 5 wallet
Original title: Trezor warns of suspected crypto-theft implant in hardware wallet
An Indonesian buyer found an extra cellular board in a CryptoBilis Safe 5; Trezor has not examined it.
Trezor said it has credible reports of a suspected hardware implant in a Trezor Safe 5 sold by reseller CryptoBilis in Southeast Asia. An Indonesian customer who bought the device on Tokopedia in August 2026 found an extra board with a cellular module and antenna between the main board and screen. Based on the customer’s unconfirmed account, the implant may read the screen, including the recovery phrase, and transmit it over a mobile network. Trezor has not received the device, knows of no stolen funds from this case, and told CryptoBilis buyers from March 2026 onward not to use those devices.
Unconfirmed: Trezor has not examined the device; implant capability and any theft remain unconfirmed.
- Trezor stopped CryptoBilis sales on October 9, 2026, after a Ledger case.
- CryptoBilis was also implicated in a Ledger implant incident this month.
- Buyers with proof of purchase can request a replacement or voucher.
- Trezor said weighing a device is not a reliable tamper check.
- Singapore police added $3,500,000 to reported Ledger-user losses.
Impact: Suspected capture and cellular theft of wallet recovery phrases
| Product | Affected |
|---|---|
| Trezor Safe 5 | devices bought via CryptoBilis from March 2026 onward |
- 1.Do not set up or use a Trezor bought via CryptoBilis from March 2026 onward.
- 2.Move funds to a new wallet created with a new recovery phrase.
- 3.Contact Trezor with proof of purchase for a replacement or voucher.
- Vendors
- Trezor
- Products
- Trezor Safe 5
- Organizations
- CryptoBilisLedger
- Countries
- Indonesia
From the original article
2 min read at bleepingcomputer.com
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.