Trezor has alerted users to a suspected malicious implant discovered in a Safe 5 hardware wallet sold through Southeast Asian reseller CryptoBilis. An Indonesian customer who purchased the device in August 2026 found an extra circuit board equipped with a cellular module and antenna positioned between the wallet’s main board and screen. Based on available information, the implant may be capable of reading information displayed on the screen, including recovery phrases, and transmitting it over a mobile network. Trezor has not yet examined the device but has advised affected users to transfer their cryptocurrency to safe wallets.
The incident mirrors a recent compromise involving competitor Ledger through the same retailer, with similar implant characteristics. Trezor halted sales through CryptoBilis in October 2026 and recommends against using any devices purchased from this reseller since March 2026. The company states it is unaware of any stolen funds from this supply-chain attack. Customers with proof of purchase can request a replacement device or voucher, and those who have already set up compromised wallets should move their funds to newly created wallets with fresh recovery phrases.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
