Trezor Warns CryptoBilis Buyers of Suspected Safe 5 Implant

Trezor urged customers who bought hardware wallets from reseller CryptoBilis since March 2026 to move their funds to a new wallet after a disclosure alleged a physical implant in a Safe 5. The company received the report on Oct. 28 about a device bought in August through Tokopedia. It has not examined that device, but said it considers the report credible and is treating it as a security risk.

Why it matters

The alleged implant is an additional circuit board fitted between the device’s main board and screen. Trezor says it contains a cellular module and antenna that could read information displayed on the screen, including a recovery phrase, and transmit it over a mobile network. A recovery phrase can provide access to a wallet, making the reported threat a supply-chain risk rather than a software vulnerability.

Trezor removed CryptoBilis from its authorized reseller network earlier this month after reports of tampered Ledger devices sold through the same distributor. Ledger confirmed physical tampering in its signers, while OneKey cut ties with the reseller, froze new approvals and offered free replacements. Trezor says it has examined four devices purchased from CryptoBilis and found no signs of tampering in those units.

Market impact

Trezor reports no user fund losses tied to the suspected Safe 5 implant. Onchain analysts estimated losses linked to the separate Ledger incident at more than $86 million across Bitcoin, Ethereum and Tron, but Ledger has not confirmed those figures.

The warning adds to a series of security issues affecting Trezor this year. A breach at shipping provider ShipMonk exposed personal data belonging to about 13,700 customers in August; Trezor later said about 67,000 U.S. customers were affected by the same breach. In September, the company also disclosed that a breach at a third-party email provider enabled phishing messages to be sent from Trezor’s official domain. Trezor is offering replacement devices to affected CryptoBilis customers and advises them to contact its Support team.