Trezor Urges CryptoBilis Customers to Move Funds Over Hardware Wallet Tampering Threat

Trezor has warned customers who purchased hardware wallets through CryptoBilis since March 2026 to transfer their cryptocurrency immediately. The warning follows a security disclosure involving a suspected hardware implant capable of stealing wallet recovery phrases.

According to Trezor’s October 30 announcement, a customer reported discovering suspicious components inside a Safe 5 hardware wallet. The customer purchased the device through Tokopedia in August 2026, raising concerns about products distributed through the reseller.

Trezor received the disclosure on October 28 and subsequently interviewed the affected customer through a video call. While investigators have not physically examined the reported device, the company considers the disclosure credible enough to warrant immediate action.

Trezor Chief Commercial Officer Danny Sanders urged affected customers to move their assets into new wallets rather than await further confirmation. The company also offered replacement devices to customers who purchased wallets through CryptoBilis during the specified period.

Also Read: Big News: Ripple Expands Water.org Partnership With $6 Million Commitment and RLUSD Integration

Suspected Cellular Implant Raises Concerns Over Trezor Safe 5 Wallet Security

Investigators identified an additional circuit board reportedly positioned between the Safe 5 wallet’s main board and display screen. The suspected implant contains a cellular communication module and antenna capable of transmitting information through mobile networks.

Significantly, the hardware could reportedly capture sensitive information displayed on the wallet’s screen, including the owner’s recovery phrase. Such information could allow attackers to access cryptocurrency holdings without physically possessing the original wallet.

Trezor removed CryptoBilis from its authorized reseller network earlier in October following separate reports involving compromised Ledger devices. Since removing the distributor, the company has examined four customer devices and found no evidence of physical tampering.

Nevertheless, the latest disclosure prompted broader precautions because investigators have not completed a technical examination of the reported Safe 5 device. Trezor confirmed that no customer losses have been reported in connection with the suspected implant.

Ledger and OneKey Cut CryptoBilis Ties as Security Incidents Mount

The warning follows earlier discoveries involving Ledger hardware wallets distributed through CryptoBilis, which raised concerns about reseller security controls. Ledger previously confirmed physical modifications affecting devices supplied through the distributor, prompting additional scrutiny of affected products.

Blockchain investigators estimated losses connected to the Ledger incident at more than $86 million across Bitcoin, Ethereum, and Tron. Ledger has not independently confirmed those estimates, leaving the reported financial impact unverified by the manufacturer.

Meanwhile, hardware wallet manufacturer OneKey also terminated its relationship with CryptoBilis and suspended new reseller approvals. OneKey additionally offered free replacement devices as manufacturers responded to concerns surrounding the distributor’s products.

Trezor has faced other security incidents involving external service providers during 2026, including a breach affecting customer shipping information. An August disclosure identified approximately 13,700 affected customers, while September findings added roughly 67,000 customers in the United States.

Separately, attackers exploited a third-party email provider in September to distribute phishing messages using Trezor’s official email domain. These incidents involved customer information and communications rather than the physical wallet modifications described in the latest disclosure. Trezor maintains its recommendation that affected CryptoBilis customers migrate their funds and contact support for replacement hardware.

Also Read: Bitcoin Eyes $90,000 as Futures Open Interest Surges Past $140 Billion