- The suspected Safe 5 implant awaits physical examination; no related customer losses have been reported.
- The warning covers all models supplied by CryptoBilis from March 2026 onward.
- Affected users should create new wallets with new recovery phrases, not restore existing backups.
Trezor urged customers who bought devices supplied by CryptoBilis from March 2026 onward to move their funds immediately. The October 30 warning follows a credible report of a suspected implant inside a Safe 5 hardware wallet. The manufacturer has not examined that device and says no affected reseller customer has reported losing funds to it.
Trezor Reviews Suspected Safe 5 Implant Before Lab Inspection
The company’s announcement says an Indonesian customer submitted the disclosure on October 28. The wallet was purchased through CryptoBilis on Tokopedia in August.
Photographs and a video interview supported the decision to warn customers before laboratory testing. Investigators are arranging to receive the device, with the attacker’s identity still unknown.
The customer described an additional circuit board between the main board and screen, containing a cellular module and antenna. It allegedly captures displayed information, including recovery phrases, and transmits it over a mobile network when powered.
A stolen recovery phrase could allow someone to restore the wallet elsewhere and transfer its assets. The reporting customer had moved his funds before discovering the suspected implant.
According to Danny CCO at Trezor on X, Trezor removed CryptoBilis from its reseller network on October 9 following reports involving modified Ledger devices. Four customer wallets examined afterward showed no tampering; the newly reported Safe 5 was outside that group.
Trezor Urges New Recovery Phrases and Offers Replacements
The warning covers every model supplied by the reseller during the specified period, including stock sold through other stores. Customers unsure of their purchase source should check receipts or contact official support.
Affected users should transfer assets to a newly created wallet with a completely new recovery phrase. Restoring the existing phrase on another device would preserve any exposure if attackers already obtained it.
Customers who have not configured their devices should leave them unused and avoid entering an existing backup. The company also advises against opening or weighing wallets as a test for tampering.
Eligible buyers can obtain a replacement shipped directly by Trezor or a voucher covering a new device. They should retain their existing hardware and contact support, which will never request their recovery phrase.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
