Trezor Warns of Suspected Implant in Safe 5 From CryptoBilis

Hardware wallet maker Trezor said on October 30, 2026, that it received a credible report of a suspected hardware implant in a Trezor Safe 5 bought in August 2026 from reseller CryptoBilis in Southeast Asia. The company urges anyone who bought devices from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery seed as soon as possible.

Details

According to Trezor, a customer in Indonesia reported the problem on October 28 through its responsible-disclosure program. The customer bought the device on the Tokopedia marketplace. By their description, an extra circuit board with a cellular module and an antenna is fitted inside, designed to intercept what appears on the screen. Trezor has not yet received the device and cannot confirm the implant, but treated the report as credible based on the customer's account and a video interview. Lab analysis is still pending.

Trezor stresses that no CryptoBilis buyer has reported a loss of funds to it. The guidance applies to every Trezor model bought from that reseller, not only the Safe 5. The company removed CryptoBilis from its authorized-reseller list on October 9, after Ledger found tampering in its own wallets sold through the same seller; we covered that case separately. Trezor had earlier trimmed its reseller network and said it had found no evidence that its own devices were compromised.

What It Means for the Market

If confirmed, it would be the first sign that the implant scheme described in the Ledger case also reached a second major manufacturer. For now it is a single report with no verified device, so conclusions are premature. For holders of bitcoin and ether the practical advice is unchanged: buy a wallet only from the manufacturer or from the official stores listed on its website, and never enter an existing seed on a device you doubt. Market prices are on the daily summary.