Image Credit: Shutterstock
- Trezor urges recent CryptoBilis customers to transfer assets to new wallets.
- The warning follows a reported hardware implant capable of transmitting recovery phrases.
- Trezor removed CryptoBilis as an authorized reseller and offered device replacements.
Trezor is urging customers who bought its devices through CryptoBilis from March 2026 onward to move funds to a new wallet with a new recovery seed.
The company received a report of a suspected hardware implant in a Safe 5. It considers the report credible but has not yet examined the device.
CryptoBilis Buyers Should Move Funds Without Reusing Their Seeds
The Oct. 30 warning covers every Trezor model supplied through CryptoBilis, including purchases from its Tokopedia store. Buyers unsure where their device came from can check their receipt or contact Trezor Support.
The new wallet should be created away from the suspect device. Restoring the old recovery seed on another device leaves the same wallet credentials in use and does not resolve possible exposure.
If no secure hardware wallet is available, Trezor recommends temporarily moving funds to a software wallet or an exchange the customer knows. Users should check the full receiving address before sending.
Devices that have not been set up should remain unused. Buyers should not enter an existing recovery seed into them.
Reported Implant Could Transmit Recovery Phrases Over a Mobile Network
An Indonesian customer reported the suspected implant to Trezor on Oct. 28. The Safe 5 had been purchased through CryptoBilis on Tokopedia in August.
The customer described an extra circuit board between the wallet’s main board and screen, fitted with a cellular module and antenna. It allegedly reads information displayed on the screen, including the wallet backup, and transmits it over a mobile network when the device is plugged in.
Trezor reviewed photographs and interviewed the customer by video before deciding to warn buyers. The company said:
“[…] Waiting for lab confirmation would leave CryptoBilis buyers exposed in the meantime.”
No related customer losses have been reported to Trezor. The customer who reported the suspected implant had moved their funds before discovering it.
Trezor Offers Replacements After Removing CryptoBilis as a Reseller
CryptoBilis had been an authorized Trezor reseller in Southeast Asia. Trezor removed it on Oct. 9 after Ledger began investigating losses involving devices sold through the distributor.
Ledger has since confirmed physical implants in devices from the affected distribution channel. Its laboratory findings concern Ledger products; Trezor’s reported Safe 5 still awaits examination.
Customers arranging a replacement should never share their recovery phrase. Trezor says its support team will not ask for it and warns of impersonators using emails, letters and phone calls.
Buyers in the affected purchase window can request a replacement shipped directly by Trezor or a voucher covering a new device. They should keep the original wallet and contact Trezor Support.
