Trezor warns buyers of a reseller's wallets over implant
Trezor says a credible report points to a hardware implant in a Safe 5 bought from CryptoBilis, and it urges buyers from that reseller to move their funds.
The facts
- According to Decrypt, a customer in Indonesia reported the implant on October 28 through Trezor's responsible disclosure programme. The Safe 5 was bought from CryptoBilis via Tokopedia in August 2026.
- The report describes an extra board between the main board and the screen, with a cellular module and antenna, that reads the screen (including the wallet backup) and sends it over a mobile network. Trezor has not verified this and has not yet received the device.
- Trezor says no CryptoBilis buyer has reported a loss of funds. It advises anyone who bought from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase.
- Trezor dropped CryptoBilis as a reseller on October 9 and has inspected four CryptoBilis devices (a Safe 7, two Safe 5s and a Safe 3) without finding tampering.
Case notes · Danny's take
Why it matters
The wallet can be perfectly honest and still lose you your coins. The weak point here is the supply chain: who handled the box before you did. Trezor says it is acting before lab confirmation because waiting would leave buyers exposed. That is the right order of priorities. A hardware wallet is only as safe as the route it took to reach you. Buy from the maker, not from whoever has the best price.
For traders
If you hold coins on a device from a third-party seller, check where it came from and treat any doubt as a reason to move funds. Watch Trezor's updates, and whether Chainalysis or others link on-chain losses to CryptoBilis devices. Right now Trezor reports no confirmed losses.
For builders
Wallet makers and resellers need tamper checks that users can run themselves, and clear guidance on buying direct. Anyone building around hardware wallets should assume the recovery phrase on a screen can be read by a hostile device. Design onboarding that warns buyers about the reseller risk.
Not financial advice. Do your own investigation.
This story was summarised with AI from Decrypt's reporting and checked against our editorial policy. Danny's take reflects his views. Disclaimer.
Danny Walter
Founder of Moon Republic, Volt Terminal and Moon Republic Academy. Author of The Market Is a Crime Scene and After the Applause.