Trezor Warns That Safe 5 Devices Sold by CryptoBilis May Have Hardware Implants

Trezor stated that its security team received a responsible disclosure report alleging that a Trezor Safe 5 purchased from Southeast Asia's official distributor CryptoBilis had a hardware trojan implanted inside. The device was purchased through Tokopedia in August 2026. The report claims that an extra circuit board equipped with a cellular module and antenna was found between the motherboard and the screen, capable of reading the screen display contents and exfiltrating them via mobile network when the device is powered on. Trezor has not yet received the physical device for laboratory verification, but based on the customer's description and video communication, it considers the report credible and has issued a warning in advance. Trezor stated that no users have reported losses so far, and advised users who purchased devices through CryptoBilis starting March 2026 to migrate their assets to wallets using newly generated seed phrases as soon as possible, and under no circumstances should they enter existing seed phrases on suspicious devices. Affected users can contact the official team to request a replacement device or voucher. Trezor removed CryptoBilis from its official distributor list on October 9.