Your Trezor Could Be Compromised: Company Issues Urgent Warning to Customers
Trezor has issued an urgent warning to customers who purchased hardware wallets from CryptoBilis on or after March 2026, following reports of a potentially compromised Safe 5 device containing an extra circuit board.
The security alert comes after reports emerged of a possible hardware implant inside a Trezor Safe 5 device. CryptoBilis was an official Trezor reseller in Southeast Asia until October 2026, when the company removed it from its list of authorized sellers following similar tampering reports involving Ledger devices.
On October 28, Trezor's security team received a responsible disclosure from a customer in Indonesia who purchased a Trezor Safe 5 through Tokopedia in August 2026. According to the report, an extra circuit board had been fitted inside the device, containing a cellular module and an antenna.
Security Risk
The implant can read whatever appears on the screen, including the wallet backup, and transmit that information over a mobile network whenever the device is plugged in. Trezor has received photos and interviewed the customer but has not yet examined the physical device in its laboratory.
Customer Response
For those using an affected device, Trezor warned that simply using the wallet backup on another hardware wallet won't fix the problem. Customers should move funds to a software wallet or exchange they trust, carefully checking the full receiving address before sending anything. Those who haven't set up their device should not use it.
The company also cautioned about potential phishing attacks targeting customers during this incident. All customers who purchased from CryptoBilis during the affected period are eligible for a free replacement Trezor or a voucher covering the cost of a new device.
Broader Concerns
Hardware wallet security concerns are on the rise, following similar incidents with Ledger devices. Just this week, the Singapore Police Force revealed that crypto users have reportedly lost around $3.5 million after using tampered Ledger devices, with at least two confirmed cases since September 10.
So far, no stolen funds have been reported in connection with the Trezor incident, and the customer who discovered the implant had already moved his funds before finding it. Trezor stated it does not know who is behind the attack and has no reports involving other resellers or regions.
Related
