Security Alert: Suspected Hardware Implant Found in Safe 5 Sold by CryptoBilis, Says Trezor

BlockBeats news, October 30: Hardware wallet manufacturer Trezor posted that its security team received a responsible disclosure report alleging that a Trezor Safe 5 purchased from Southeast Asian official reseller CryptoBilis had a hardware trojan implanted inside. The device was purchased through Tokopedia in August 2026, and the report describes an extra circuit board with a cellular module and antenna between the motherboard and the screen, which is alleged to be able to read screen display contents including seed phrases and exfiltrate them via mobile network when the device is powered on. Trezor has not yet received the physical device for laboratory verification, but based on the customer's description and video communication, it is treating it as a credible report and issuing an early warning.

CryptoBilis is a Southeast Asian reseller that previously caused a large-scale fund outflow incident due to selling tampered Ledger devices, and Trezor removed it from its official reseller list on October 9. Trezor said no users have reported losses so far, and recommends that users who purchased devices through CryptoBilis since March 2026 migrate assets to a brand-new seed phrase wallet as soon as possible, and never enter existing seed phrases on suspicious devices; affected users can contact the official team to obtain replacement devices.