Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by Crypto Bilis

Summary: A customer in Indonesia reported that a Trezor Safe 5 hardware wallet bought from reseller CryptoBilis in August through Tokopedia contained an extra circuit board with a cellular module and antenna that reads the screen, including the recovery phrase, and transmits it whenever the device is plugged in. Trezor, which has not yet examined the device but interviewed the customer by video call and is arranging lab delivery, is telling anyone who bought any Trezor model from CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase.
Key Takeaway: Trezor dropped CryptoBilis as its Southeast Asia reseller on October 9 after Ledger began investigating losses among its own customers who bought from the same reseller, and Singapore police reported at least two cases since September 10 of Ledger wallets from retail stores containing components built to capture recovery phrases or private keys. Trezor says owners cannot reliably check a device themselves, so every wallet bought through that supply chain since March 2026 carries the same open question.

Read the original at The Hacker News ↗