Trezor warns of a suspected implant in a Safe 5 wallet
Oct 30, 2026 · Summarized by Fundy Tech from The Hacker News
Trezor says a customer found an extra circuit board in a Safe 5 bought from CryptoBilis. Buyers from CryptoBilis since March 2026 should move funds to a new wallet.
Key points
- The board reportedly sends recovery phrases over a mobile network.
- The buyer purchased the wallet in August through Tokopedia.
- Trezor dropped CryptoBilis on October 9.
Why it matters
This matters for anyone who stores crypto in a hardware wallet. A hidden implant could expose a recovery phrase and put funds at risk. If you bought a Trezor from CryptoBilis, Trezor is telling you to move assets to a new wallet and create a new recovery phrase. Do not rely on a visual check of the device.
Who’s affected: Trezor buyers from CryptoBilis since March 2026
What to do
- Move funds to a new wallet.
- Create a new recovery phrase.
- Avoid opening or weighing the device yourself.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.