Trezor warned customers after receiving a report of a possible hardware implant in a Trezor Safe 5 bought from CryptoBilis in Indonesia in August 2026. Trezor said the report was credible but it had not examined the device, and it had no confirmation that CryptoBilis customers had lost funds. The reporter said the suspected implant could read the screen, including the wallet backup, and transmit the data over a mobile network.
Trezor urged anyone who bought any of its models through CryptoBilis since March 2026 to move their assets to a new wallet with a new seed phrase; restoring the old backup would not remove the risk if it had been intercepted. Trezor found no tampering in four other returned devices but said that did not rule out compromised devices elsewhere.
