Trezor Says CryptoBilis-Sold Wallet May Contain Malicious Components, Urges Asset Migration

Trezor said its security team considers a Trezor Safe 5 hardware wallet purchased through authorized Southeast Asian distributor CryptoBilis to be a suspected supply-chain attack. According to Foresight News, the device was bought on Indonesia’s Tokopedia e-commerce platform in August 2026 and reportedly contained an additional circuit board, a cellular communications module and an antenna that could read the device’s screen and transmit information over a mobile network. Trezor has not received the wallet for laboratory testing, but said the user’s description and video interview made the report credible. No user funds have been reported stolen. The company advised users who purchased hardware wallets through CryptoBilis since March 2026 to move their assets to a wallet created with a new recovery phrase.