Trezor warns of suspected implant in Safe 5 sold by CryptoBilis
Original title: Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
Trezor has not lab-tested the device but tells CryptoBilis buyers since March 2026 to move funds to a new recovery phrase.
A customer in Indonesia reported that a Trezor Safe 5 bought from CryptoBilis in August through Tokopedia contains an extra board between the main board and screen, with a cellular module and antenna. He says the board reads the screen, including the recovery phrase, and sends it out when the device is plugged in. Trezor has photos, a description and a video interview, finds the report believable, and is arranging lab analysis. No CryptoBilis buyer has reported lost funds to Trezor. Ledger has described a similar implant, and Singapore police say at least two Ledger wallets bought in Singapore since September 10 contained malicious components.
Unconfirmed: Trezor has not examined the wallet in its lab, does not know who is responsible, and has no fund-loss reports from CryptoBilis buyers.
- The report reached Trezor two days before its October 30 blog post.
- Advice covers every Trezor model CryptoBilis supplied since March 2026, including via Tokopedia.
- Restoring the old recovery phrase on another device does not help if it was already sent.
- Trezor dropped CryptoBilis as its Southeast Asia reseller on October 9.
- Trezor says owners should not weigh or open devices to check them.
Impact: Recovery phrase read from the screen and sent over cellular
| Product | Affected |
|---|---|
| Trezor Safe 5 | unit bought from CryptoBilis; warning covers all Trezor models CryptoBilis supplied since March 2026 |
- 1.Move funds from any CryptoBilis-sourced Trezor to a new wallet with a new recovery phrase.
- 2.Do not set up an unused CryptoBilis device or enter an existing recovery phrase into it.
- 3.Keep the device and contact Trezor Support for a replacement or voucher.
- Products
- Trezor Safe 5
- Organizations
- CryptoBilisSingapore Police Force
From the original article
3 min read at thehackernews.com
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.