Trezor Warns CryptoBilis Buyers After Report of Hardware Implant

Trezor has warned customers who purchased its hardware wallets from CryptoBilis after receiving a report of a possible implant inside a Trezor Safe 5.

The device was bought through Tokopedia in August 2026. Trezor considers the report credible based on the customer’s description, photographs and a video interview, but had not received the device for examination when it published the warning.

Trezor Safe 5 Report Follows Ledger Investigation

Trezor’s security team received the disclosure on October 28. According to the report, an additional circuit board containing a cellular module and antenna was fitted between the Safe 5’s main board and screen.

The customer reported that the component could read information shown on the screen, including the wallet backup, and transmit it over a mobile network. Trezor stated that it had not independently verified the reported functionality.

The disclosure followed an investigation involving Ledger devices purchased from the same reseller. Ledger confirmed that some of those devices had been physically tampered with, and Trezor removed CryptoBilis from its list of authorized resellers on October 9.

Trezor has not identified who was behind the reported Safe 5 modification. At the time of its announcement, the company had no evidence that a Trezor customer had lost funds in connection with the report.

Guidance Covers All Trezor Models Bought From CryptoBilis

Although the disclosure concerns one Safe 5, Trezor’s guidance applies to every Trezor model purchased from CryptoBilis from March 2026 onward. That includes devices supplied by the reseller through marketplaces such as Tokopedia.

For customers already using an affected device to hold assets, the company advised moving funds to a newly created wallet with a new recovery phrase as soon as possible. The guidance also applies to customers who manage ADA using an affected Trezor.

A recovery phrase provides access to a wallet’s keys. Trezor explained that restoring the backup generated by a potentially tampered device on another device does not resolve the issue.

Customers who have not yet set up their CryptoBilis device were advised not to initialize it or enter an existing wallet backup. Trezor also warned that its support team will never ask users to share their recovery phrase.

[NEWSBREAK]

Replacement Device or Voucher Available

Trezor stated that customers who purchased a device from CryptoBilis from March 2026 onward are eligible for either a new Trezor shipped directly by the company or a voucher covering the cost of a new device.

The company asked eligible customers to keep their CryptoBilis device and contact Trezor Support to arrange the replacement or voucher. It also warned that scammers could use the incident to target cryptocurrency holders through fake messages or calls.

For customers who do not have another secure hardware wallet available, Trezor suggested temporarily moving funds to a familiar software wallet or exchange. The company advised checking the complete receiving address before sending assets.