Trezor warned CryptoBilis customers on October 30, 2026, after a buyer reported finding a hardware implant in a Safe 5 bought from the reseller in August 2026. Trezor said it considers the report credible but has not received or examined the device. The reported implant could read the wallet backup from the screen and transmit it over a mobile network, but Trezor has not verified that account. The company said no CryptoBilis buyer has reported a loss of funds to it.
Trezor urged anyone who bought one of its wallets from CryptoBilis from March 2026 onward to move their funds to a new wallet with a new recovery phrase and not reuse the old phrase. It said buyers who have not set up their device should not use it.
