Trezor urged customers who bought its hardware wallets from former authorized reseller CryptoBilis since March to move their funds after a suspected implant was reported in a Safe 5 device. A customer in Indonesia reported an unauthorized circuit board in a wallet bought on Tokopedia in August. According to the report, it could capture information shown on the screen, including recovery phrases, and send it over a cellular network.
Trezor said it had not examined the device and had received no reports of related losses. It has not established where the suspected tampering occurred. Reports of losses involving Ledger wallets sold through CryptoBilis surfaced on Oct. 9; Ledger confirmed an unauthorized implant in one affected device. Trezor announced plans to reduce its reseller network on Oct. 13.
