Trezor Alerts Customers Over Potential Hardware Implant in Safe 5

Trezor Issues Urgent Warning

Hardware wallet maker Trezor has raised alarms for customers who purchased its Safe 5 model from reseller CryptoBilis, following reports of a potential hardware implant discovered in one device. A buyer in Indonesia reported the issue through Trezor's responsible disclosure program, leading the company to recommend immediate action for users.

Details of the Incident

The reported hardware implant was said to be integrated between the device's main board and its display, featuring a cellular module and antenna capable of reading and transmitting wallet backup information over a mobile network whenever the device is connected. Trezor has not yet verified the device but is treating the report as credible based on the buyer's description and accompanying video evidence.

In light of this discovery, Trezor has urged all customers who bought a Safe 5 from CryptoBilis since March 2026 to transfer their funds to a new wallet with a different recovery phrase. The company emphasized that no losses have been reported by any CryptoBilis customers thus far.

Background on CryptoBilis

This incident comes after Trezor cut ties with CryptoBilis as a reseller on October 9, amid concerns raised by rival company Ledger regarding losses among its customers linked to purchases from the same reseller. Ledger's investigation revealed a similar issue involving implanted devices that compromised users’ recovery phrases during setup. Trezor has inspected several devices sold by CryptoBilis and found no signs of tampering in those cases.

While Trezor has previously dealt with security breaches, such as a data exposure incident involving a shipping partner, the company is taking this new report seriously to protect its users. Trezor continues to monitor the situation and has encouraged affected customers to reach out for support regarding their devices.