Trezor warns CryptoBilis buyers of phrase-stealing implant
Trezor warned on Oct. 30 that buyers of its models supplied by CryptoBilis since March 2026 should treat their recovery phrases as exposed, after one customer reported a suspected implant in a Trezor Safe 5. Trezor has not examined the wallet and says it has no reports involving other resellers.
The reported extra board sits between the wallet’s screen and main electronics. It reads what the screen displays, including the recovery phrase, and sends it over a cellular connection when the device is plugged in. If the phrase was transmitted, replacing the wallet or restoring the same backup on another device would not revoke it; whoever received the phrase could still access the funds.
For buyers whose Trezor came through CryptoBilis, including via Tokopedia or another store, exposure would follow the recovery phrase, not the hardware. The report has not yet established whether any other devices were altered or how widespread the issue is.
Trezor warns of suspected crypto-theft implant in hardware wallet
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia.