Current outcome
Trezor still treats this as a credible but not lab-verified suspected hardware implant, has advised anyone who bought from CryptoBilis since March 2026 to move funds and is offering replacement devices while reviewing other Asia-based resellers; it has not received the affected Safe 5, found no tampering in four inspected CryptoBilis devices, and no CryptoBilis buyer has reported lost funds.
Progress timeline
3 material updates- #01
World’s Second-Largest Hardware Wallet Maker Trezor Warns of Suspected Hardware
Trezor disclosed a credible report of a suspected hardware implant in a Trezor Safe 5 purchased from reseller CryptoBilis in August 2026 and urged anyone who bought from that reseller since March 2026 to move funds to wallets with newly generated recovery seeds, while noting the device has not been received for verification and no customer has reported lost funds.
Source evidence: wublockchainenglish · Cointelegraph
- #02
Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5
The report adds disclosure details: an Indonesian buyer reported it on October 28, 2026 via responsible disclosure; the Safe 5 was bought from CryptoBilis via Tokopedia in August 2026. The implant is described as an extra circuit board between the main board and screen, with a cellular module and antenna, able to read screen contents including the backup and transmit over a mobile network when plugged in. Trezor says it has not received the device but treats the report as credible based on the description and a video interview; it had removed CryptoBilis on October 9 and inspected four devices bought from it (a Safe 7, two Safe 5s, and a Safe 3) finding no tampering, with no CryptoBilis buyer reporting lost funds.
State after update: Trezor still treats this as a credible but not lab-verified suspected hardware implant and has advised anyone who bought its wallets from CryptoBilis since March 2026 to move funds to a new recovery phrase; it has not received the affected Safe 5, found no tampering in four inspected CryptoBilis devices, and no CryptoBilis buyer has reported lost funds.
Source evidence: Decrypt · foresightnews
- #03
Trezor reveals Malaysian reseller sold wallet with spyware
Trezor said it will replace wallets for buyers who purchased from CryptoBilis since March 2026 and is reviewing other Asia-based resellers; the report also links CryptoBilis’s October 9 removal to an $86 million Ledger wallet hack.
State after update: Trezor still treats this as a credible but not lab-verified suspected hardware implant, has advised anyone who bought from CryptoBilis since March 2026 to move funds and is offering replacement devices while reviewing other Asia-based resellers; it has not received the affected Safe 5, found no tampering in four inspected CryptoBilis devices, and no CryptoBilis buyer has reported lost funds.
Source evidence: Protos