Trezor Urges CryptoBilis Buyers to Move Funds After Implant Report

Hardware wallets like the Trezor Safe 5 are built to keep private keys offline, immune to the malware that drains hot wallets. That promise rests on the device reaching the buyer unmodified. Ledger, Trezor's main rival, confirmed its own supply-chain implant case earlier this year, and Mark Karpeles, the former Mt. Gox chief executive, warned afterward that Trezor units might face the same exposure through resellers rather than through Trezor's own factory.

Anyone who bought a Trezor from CryptoBilis since March 2026, including the Safe 5 purchased through Tokopedia in August, is told to stop trusting that device entirely: generate a brand-new seed on a separate wallet and move every asset off the suspect unit immediately. Buyers from other channels face no such instruction. CryptoBilis customers lose the convenience of their existing setup and gain, at best, a costly reminder to verify provenance before trusting a seed phrase again.

A chip can be engineered securely and still arrive compromised if the box it ships in passes through an untrustworthy middleman. CryptoBilis sat between Trezor's manufacturing and the customer, and that single link now puts both the Ledger and Trezor incidents in the same frame: the weak point was never the cryptography, it was the reseller. Hardware wallet makers market self-custody as trustless, but a tampered intermediary shows how much trust the distribution chain still demands.

Trezor had not yet physically examined the reported Safe 5 when it issued its warning, treating one customer's disclosure as credible on description alone. Its forensic inspection of that returned unit will determine whether an implant is confirmed, and if so, how it was installed and whether other CryptoBilis-sourced devices sold since March 2026 carry the same modification. A confirmed implant would turn an isolated reseller problem into a broader recall question.