Trezor Warns Safe 5 Owners Who Bought From CryptoBilis About Possible Hardware Implant

Trezor said it received a credible report that a hardware implant was found inside a Safe 5 wallet purchased from Indonesian reseller CryptoBilis in August 2026. The implant, described as an extra circuit board with a cellular module and antenna placed between the main board and the screen, allegedly reads the screen—including the wallet’s backup phrase—and transmits it over a mobile network when the device is plugged in. Trezor has not yet examined the device but has treated the report as credible based on the customer’s description and a video interview. The company urged anyone who bought a Trezor wallet from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase and not to reuse the old phrase on any device. No CryptoBilis buyer has reported a loss of funds to Trezor. The incident follows Ledger’s own investigation of similar implants in devices sold through CryptoBilis. Trezor removed CryptoBilis as a reseller on October 9 after the incident.