Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis
Trezor reported a suspected hardware implant in a Safe 5 bought in August 2026 from reseller CryptoBilis via Tokopedia. The alleged implant is a board with a cellular module that reads the screen, including recovery phrases. Trezor has not examined the device and found no tampering in four other units, and it told buyers who purchased from the reseller since March 2026 to move funds.
TL;DR Trezor warns CryptoBilis Safe 5 buyers to move funds after a credible report of a screen-reading cellular implant.
Organisations named here
- CryptoBilis
- Tokopedia
- Trezor
Technologies named here
- Trezor Safe 5
Techniques named here
- Hardware implant
Concepts named here
- Recovery phrase exposure
- Supply chain tampering via resellers
Related in Hardware & RF

HAETAE on a Diet: Less Stack, Less Time on Low-End Microcontrollers
geo-tp/ESP32-Bit-Pirate
