Hardware wallet maker Trezor on Oct. 30 warned customers who bought its Safe 5 device from reseller CryptoBilis since March 2026 that a unit may contain a hidden chip, and urged them to move their crypto to a new wallet.
The company said it received a responsible disclosure report on Oct. 28 about a device bought in August 2026 through Indonesian marketplace Tokopedia. Inside, an extra circuit board was found fitted with cellular hardware allegedly able to read the screen and copy the wallet's backup seed phrase.
Trezor Chief Commercial Officer Danny Sanders said: “If you bought a Trezor from CryptoBilis from March 2026 onwards and are using it to store funds, please move your funds to a newly created wallet with a new seed as soon as possible.”
“No CryptoBilis buyer has reported a loss of funds to us,” Sanders added. The suspect device has not yet reached Trezor's lab, he said; the company opted to warn customers early instead of waiting for confirmation.
Trezor said it also obtained four other devices sold by the same reseller and inspected them, finding no signs of tampering.
Rival Ledger's wallets lost more than $86 million in bitcoin, ether and TRX in a similar episode traced to the same reseller, on-chain analysts estimated. Tampering reports on Ledger devices surfaced Oct. 9, and Trezor announced plans on Oct. 13 to shrink its reseller network, dropping CryptoBilis from it.
Trezor declined to specify the number of devices potentially exposed, saying only that sales through the reseller were very small.
