Trezor Warns CryptoBilis Buyers Since March 2026 After Safe 5 Implant Report

Suspected implant reads Safe 5 recovery phrase

A suspected malicious electronic component has been reported inside a Trezor Safe 5 bought through the e-commerce platform Tokopedia from former authorized reseller CryptoBilis. Trezor published its confirmation in an official blog post: an Indonesian user raised the alarm through the company's vulnerability disclosure channel on October 28, 2026, describing a device purchased in August 2026. According to the disclosure, an extra circuit board was mounted between the mainboard and the display screen, fitted with a cellular communications module and an antenna. The suspected attack path runs through first-time setup: when the screen shows the recovery phrase that backs up a crypto wallet's private keys, the implant would read the display and pass the text to the attacker over a mobile network. A full leaked phrase would let an attacker restore the wallet on separate hardware and take control of the assets. Trezor stresses that these details rest on the reporter's photographs, explanation and a video interview, and are not yet verified in its laboratory. As of November 1, forensics on the suspect unit is incomplete and no stolen assets have been reported in connection with it. The advisory still covers every buyer who obtained a Trezor through CryptoBilis since March 2026: holdings should move into a wallet built on a brand-new recovery phrase, and Trezor is offering a free replacement device or a purchase voucher. A new device must never be loaded with the old phrase: funds go to a fresh crypto wallet address instead, and units from the channel that have not been initialized should not be set up at all. The company also tells users not to open devices or weigh them, since weight differences are too small to detect tampering reliably.

CryptoBilis channel hit Ledger first

CryptoBilis sat at the center of an already-confirmed supply chain case before Trezor received its own report. The firm was an authorized reseller for both Ledger and Trezor in Southeast Asian markets, and in October 2026 that arrangement collapsed across brands. Ledger began investigating thefts of devices sold through the channel on October 9 and subsequently confirmed that some genuine units carried unauthorized hardware implants. On-chain analysts earlier put losses in the Ledger-linked supply chain thefts above $86 million, though Ledger has not confirmed that figure as a final total. Trezor terminated CryptoBilis' reseller authorization the same October 9, before any evidence of a modified Trezor device had surfaced, and OneKey has also ended its cooperation with the reseller, pausing new approvals and offering replacement arrangements. Trezor has inspected four devices sold through the channel so far, one Safe 7, two Safe 5 units and one Safe 3, and found no sign of physical modification in any of them. Those four, however, do not include the Safe 5 reported on October 28, which the company is arranging to send to a laboratory to test whether the extra circuit is present and capable of capturing a recovery phrase. No date has been announced for the next investigation report. Chief commercial officer Danny Sanders has said the company prefers to warn users before forensics finishes rather than wait until a theft actually occurs. Trezor reports no confirmed losses among CryptoBilis customers, and the Indonesian user moved assets away before discovering the suspicious hardware. Because Trezor runs a self-custody model, it cannot inspect users' balances directly, so it cannot rule out losses that have not been reported. Trezor also warns that attackers may exploit the incident with phishing emails, letters and calls impersonating official support to trick users into handing over a recovery phrase.

The case shows where hardware wallet risk now sits. A device's private key algorithms, secure elements and firmware can all be intact while a physical implant harvests secrets at the moment of setup, and factory packaging, seals and firmware verification do not by themselves stop tampering before delivery. Trezor's choice to push migration before forensics is complete is unusual given no confirmed loss, but the confirmed Ledger implants on the same channel give the warning a concrete basis, and it will feed security FUD across the cold-wallet sector. Two questions remain open: there is no evidence yet that the Ledger and Trezor implants came from the same attacker, and the point in the logistics or sales chain where the modification happened has not been identified. No checkpoint in that sequence is established where the attack can still be cut off.