Trezor urged customers who bought its hardware wallets from former authorized reseller CryptoBilis since March to move their funds after a report of a suspected implant in a Safe 5. A customer in Indonesia reported finding an unauthorized circuit board in a device bought on Tokopedia in August. According to the report, it could capture information shown on the screen, including recovery phrases, and transmit it over a cellular network.
Trezor said it had not examined the device and had received no reports of related losses. It said it had not established where the suspected tampering occurred and was reviewing its hardware protections. The warning followed reports of losses involving Ledger wallets sold through CryptoBilis; Ledger confirmed an unauthorized implant in one affected device.
