# Trezor Flags Suspected Implant in Safe 5 Sold by CryptoBilis

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/44378
Published: 2026-10-30T07:28:50.000Z
Updated: 2026-10-30T07:28:50.000Z
Section: Technology

> The device was bought in August. Trezor says it has not received it for lab testing and has no reports of user losses.

Trezor is warning hardware-wallet users after receiving a responsible disclosure alleging that a Safe 5 sold through CryptoBilis contained an unauthorized component that could expose information shown on the device.

Trezor said the device was purchased through Tokopedia in August 2026. The disclosure described an added circuit board between the wallet’s main circuit board and screen, with a cellular module and antenna. It alleged the hardware could read screen contents, including a seed phrase, and send them over a mobile network while the wallet was powered on.

Trezor has not received the physical device for laboratory examination. The company said it considered the disclosure credible based on the customer’s description and a video call, and issued a warning before inspecting the unit. Trezor said it had received no reports of user losses.

The company urged people who bought devices through CryptoBilis from March 2026 onward to move their assets to a wallet with a new seed phrase, avoid entering an existing phrase into a suspected device and contact Trezor about a replacement. Trezor removed CryptoBilis from its official reseller list on Oct. 9.