Trezor Warns CryptoBilis Safe 5 Buyers of Tampering Risk

Trezor warned Friday that buyers of Safe 5 hardware wallets purchased through CryptoBilis may face a tampering risk after a disclosure described an unverified device modification capable of capturing screen contents and transmitting them over cellular networks.

The disclosure concerned a Safe 5 purchased through Tokopedia in August. It alleged an extra circuit board had been installed between the wallet’s mainboard and screen, with a cellular module and antenna. Trezor has not received the device for laboratory testing, but considered the report credible based on the customer’s description and a video call.

Trezor said it had received no reports of user losses. It urged customers who bought a device through CryptoBilis since March to move their assets to a wallet set up with a newly generated recovery phrase and never enter an existing phrase into a suspect device. Affected customers can contact Trezor to request a replacement or voucher.

Trezor removed CryptoBilis from its official distributor list on Oct. 9. CryptoBilis had been identified as an official distributor in Southeast Asia.