Trezor says Safe 5 wallet from CryptoBilis had suspected hardware implant

Key points

• Trezor says the Safe 5 was bought in August on Tokopedia and reported to it on 28 Oct
• The suspected implant is an extra circuit board with a cellular module and antenna between the main board and screen
• Trezor revoked CryptoBilis' authorisation on 9 Oct and will cut its reseller network from 1 Jan 2027

Trezor has warned customers that a Safe 5 hardware wallet bought from former authorised reseller CryptoBilis may contain a malicious hardware implant, Bitcoin.com News reports. The company said its security team received a credible report of the modification and is treating it as credible while it awaits laboratory checks.

The device was bought in August through the Indonesian marketplace Tokopedia, and the customer reported it to Trezor on 28 Oct. According to Trezor, the implant is an extra circuit board fitted between the wallet's main board and its screen, with a cellular module and antenna. It allegedly captures what the screen displays, including the recovery phrase, and sends it over a mobile network when the device is powered. Trezor has reviewed photographs and interviewed the customer but has not yet examined the device itself. No funds are reported stolen from Trezor customers over the suspected compromise.

The warning follows a Ledger supply chain incident.

What to watch: Trezor's investigation continues, with laboratory verification of the device still awaited.

Read the full story on Bitcoin.com News →