Trezor warns Safe 5 wallet bought from reseller CryptoBilis may carry hidden circuit board
Buyers who purchased from CryptoBilis since March 2026 are urged to move funds to a fresh wallet and recovery phrase now.
Trezor has warned that a Safe 5 hardware wallet bought from reseller CryptoBilis may carry an extra circuit board with a cellular module that could relay the recovery phrase. The alert followed a report from an Indonesian buyer who bought the device through Tokopedia in August, and Trezor has not yet examined the unit, which is being sent to its lab. Trezor advises anyone who bought from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase, and to avoid setting up any such device. Trezor cut ties with CryptoBilis on October 9, before it had any sign its own devices were affected, after Ledger began investigating losses among customers of the same reseller. Separately, Singapore police said on October 28 that Ledger wallets sold by some local retailers contained malicious components, with at least two cases reported since September 10.
Why it matters
The warning puts the burden on people who bought through one reseller, not on the device maker's own supply chain alone. Trezor has not yet examined the suspect unit, so the claim rests on one buyer's report, but the advice is already clear: funds in devices from that channel are at risk until proven otherwise. The parallel Singapore police report on tampered Ledger wallets suggests the problem may reach beyond a single seller, which widens the question of how hardware wallets are distributed through unofficial channels.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.