Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis

Trezor has advised customers who purchased hardware wallets from former authorized reseller CryptoBilis since March to transfer their funds. This warning comes after a report of a suspected hardware implant in a Trezor Safe 5 device purchased from CryptoBilis on the Indonesian e-commerce platform Tokopedia in August. The suspect implant, which could potentially capture sensitive information such as wallet recovery phrases, transmits the data over a cellular network.

Trezor has not yet analyzed the device but is treating the report as credible, emphasizing the need to caution users before confirming the issue and experiencing possible fund losses. A Trezor spokesperson stated that sales through CryptoBilis were "very small," though they did not disclose exact numbers. The company is currently investigating its hardware protections, acknowledging that current security measures like seals and packaging are insufficient.

This warning follows reports of crypto losses linked to Ledger wallets sold through CryptoBilis, which were disclosed on October 9. Ledger's confirmation of an unauthorized hardware implant in one affected device adds to the concern. Security researcher Joe Grand had previously alerted Trezor in August regarding tampered Trezor One and Model T wallets purchased from unauthorized sellers on social media platforms.

Trezor's earlier assurance of no evidence of compromised devices only applied to new wallets sold through authorized resellers. The company has since announced plans to reduce its reseller network as of October 13.