Trezor: Implant Reported in a Safe 5 Sold by CryptoBilis

None reported. Trezor: "No CryptoBilis buyer has reported a loss of funds to us."

Root cause: Per the reporter, as relayed by Trezor (not verified by Trezor): an extra circuit board between the main board and screen, with a cellular module and antenna, reads what the screen shows, including the wallet backup, and sends it over a mobile network when plugged in.

Timeline, as sourced: Per Trezor: CryptoBilis removed as reseller 9 Oct 2026; responsible disclosure received 28 Oct; advisory 30 Oct 07:01 UTC. Device not yet examined in Trezor's lab.

Claimed (Trezor) (blog (opens in a new tab)): on 28 Oct its security team received a responsible disclosure of a single hardware implant in a Trezor Safe 5 bought from CryptoBilis in August 2026, via Tokopedia. Trezor has not yet received the device but is treating the report as credible based on the customer's description and a video interview. The four CryptoBilis devices it had inspected showed no tampering.

Claimed (Trezor) (post (opens in a new tab)): anyone who bought a Trezor from CryptoBilis from March 2026 onwards should move funds to a new wallet with a new seed and never reuse the old seed; devices not yet set up should not be used. Eligible buyers can get a replacement device. Trezor thanks SEAL 911 for working on the response.

Related: the earlier Ledger CryptoBilis implant, Log entry. Trezor says it will not draw comparisons while investigations continue.