Trezor Warns CryptoBilis Buyers Over Suspected Safe 5 Implant

• The suspected Safe 5 implant awaits physical examination; no related customer losses have been reported.
• The warning covers all models supplied by CryptoBilis from March 2026 onward.
• Affected users should create new wallets with new recovery phrases, not restore existing backups.

Trezor urged customers who bought devices supplied by CryptoBilis from March 2026 onward to move their funds immediately. The October 30 warning follows a credible report of a suspected implant inside a Safe 5 hardware wallet. The manufacturer has not examined that device and says no affected reseller customer has reported losing funds to it.

Trezor Reviews Suspected Safe 5 Implant Before Lab Inspection

The company’s announcement says an Indonesian customer submitted the disclosure on October 28. The wallet was purchased through CryptoBilis on Tokopedia in August.

Photographs and a video interview supported the decision to warn customers before laboratory testing. Investigators are arranging to receive the device, with the attacker’s identity still unknown.

The customer described an additional circuit board between the main board and screen, containing a cellular module and antenna. It allegedly captures displayed information, including recovery phrases, and transmits it over a mobile network when powered.

A stolen recovery phrase could allow someone to restore the wallet elsewhere and transfer its assets. The reporting customer had moved his funds before discovering the suspected implant.

Trezor Urges New Recovery Phrases and Offers Replacements

The warning covers every model supplied by the reseller during the specified period, including stock sold through other stores. Customers unsure of their purchase source should check receipts or contact official support.

Affected users should transfer assets to a newly created wallet with a completely new recovery phrase. Restoring the existing phrase on another device would preserve any exposure if attackers already obtained it.

Customers who have not configured their devices should leave them unused and avoid entering an existing backup. The company also advises against opening or weighing wallets as a test for tampering.

Eligible buyers can obtain a replacement shipped directly by Trezor or a voucher covering a new device. They should retain their existing hardware and contact support, which will never request their recovery phrase.