Trezor Warning: Safe 5 sold by CryptoBilis is suspected of hardware implantation

Trezor stated that the security team received a responsible disclosure report claiming that a Trezor Safe 5 purchased from the Southeast Asian official distributor CryptoBilis had a hardware trojan implanted internally. The device was acquired through Tokopedia in August 2026, and the report indicated that there was an additional circuit board with a cellular module and antenna between the motherboard and the screen, which could read the screen display content and transmit it externally via mobile network when the device was powered on.

Trezor has not yet received the physical device for laboratory verification, but based on customer descriptions and video communications, they consider the report credible and have issued a warning. Trezor stated that there have been no reports of lost devices from users at this time and advised users who purchased devices through CryptoBilis since March 2026 to promptly transfer their assets to a wallet using a new mnemonic phrase, and not to enter existing mnemonic phrases on suspicious devices; affected users can contact the official support to request a replacement device or voucher. Trezor removed CryptoBilis from the official distributor list on October 9.