Trezor warns of suspected hardware implant in Safe 5 wallet sold via CryptoBilis

Severity
High
Sources
2

Trezor has issued a security notice about a suspected hardware implant in a Safe 5 bought through CryptoBilis, a reseller it removed from its authorised network on 9 October. A customer in Indonesia reported an extra board with a cellular module and antenna between the main board and screen, allegedly capturing the recovery phrase shown on the display and sending it over a mobile network. The device is going to Trezor's security lab, so the implant is unconfirmed, but all Trezor devices bought from CryptoBilis from March 2026 onward are covered as a precaution. No fund losses have been reported by CryptoBilis buyers.

For IT people · Written by AI from 2 sources · Wrong?

Full story timeline · 2 updates

  1. Fri 30 OctoberTrezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery PhrasesCyber Security News
  2. Trezor Warns of Suspected Spy Implant That Could Steal Crypto Wallet Recovery PhrasesGBHackers

Who reported · 2 outlets

Cyber Security NewsGBHackers

Report a problem