Key facts
- A customer reported an unauthorized circuit board inside a Trezor Safe 5 bought in August.
- The suspected implant could capture wallet recovery phrases and transmit them over a cellular network.
- Trezor has not yet examined the device but is treating the report as credible.
- Trezor has not established where the suspected tampering occurred.
Trezor has warned customers who purchased its hardware wallets from former authorized reseller CryptoBilis since March 2026 to move their funds due to a suspected implant in a Trezor Safe 5 device. A customer in Indonesia reported finding an unauthorized circuit board in a device bought in August 2026, which could potentially capture and transmit wallet recovery phrases. Trezor has not yet examined the device but is treating the report as credible and is reviewing its hardware protections. This follows similar reports of tampered Ledger wallets sold through CryptoBilis.