Trezor has warned users of a suspected hardware crypto-theft implant in a Trezor Safe 5 bought through reseller CryptoBilis on Tokopedia in Indonesia in August 2026. The customer found an extra circuit board — equipped with a cellular module and antenna — between the wallet's main board and screen, which on unconfirmed information appears capable of reading information displayed on the screen, including the wallet recovery phrase, and transmitting it over the mobile network when powered on. Trezor has not yet received the device to examine it (it is in transit) and says it is unaware of any funds stolen; it recommends users of any CryptoBilis-purchased device from March 2026 onward move funds to newly created wallets. CryptoBilis is the same retailer implicated in the Ledger implant incident earlier this month, and the implants appear similar in form and function; Singapore police's advisory on tampered hardware wallets has now added US$3.5 million to the recorded losses. Trezor had already halted CryptoBilis sales on 9 October and is restructuring its reseller network.

• Source article