Security Alert: Suspected Hardware Implants Discovered in Trezor Safe 5 Devices Sold via CryptoBilis

Hardware wallet manufacturer Trezor announced that its security team has received a responsible disclosure report alleging a hardware trojan was implanted inside a Trezor Safe 5 purchased via Southeast Asian official dealer CryptoBilis. The device was bought through Tokopedia in August 2026. The report details an extra circuit board equipped with a cellular module and antenna fitted between the mainboard and screen, which is claimed to read screen content including mnemonics and transmit the data externally via mobile network when the device is powered on. Trezor has not yet received the physical device for laboratory verification, but based on customer descriptions and video communications, it deems the report credible and issues a preemptive warning. CryptoBilis, a Southeast Asian dealer, previously sparked a large-scale fund outflow incident after selling tampered Ledger devices; Trezor removed it from its official dealer list on October 9. Trezor noted that no user loss reports have been received to date, advising customers who purchased devices from CryptoBilis since March 2026 to promptly move their assets to a new mnemonic wallet, never input existing mnemonics on suspicious devices, and contact the official for a replacement device if eligible.