Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5
Summary
Trezor warned customers who bought its wallets through Indonesian reseller CryptoBilis from March 2026 onward to transfer funds to a new wallet with a new recovery phrase. A buyer reported finding an unverified implant in a Safe 5 that could capture the screen, including the recovery phrase, and transmit it over a cellular network. Trezor has not examined the reported device, but considers the account credible and is issuing a precautionary warning; no related losses have been reported to Trezor. The company removed CryptoBilis as a reseller and says inspections of four other devices found no tampering. The report follows Ledger’s discovery of similar implants in devices sold by the reseller and confirmed customer losses.
