Trezor Flags Suspected Implant in Safe 5 Sold by CryptoBilis

Trezor is warning hardware-wallet users after receiving a responsible disclosure alleging that a Safe 5 sold through CryptoBilis contained an unauthorized component that could expose information shown on the device. Trezor said the device was purchased through Tokopedia in August 2026. The disclosure described an added circuit board between the wallet’s main circuit board and screen, with a cellular module and antenna. It alleged the hardware could read screen contents, including a seed phrase, and send them over a mobile network while the wallet was powered on. Trezor has not received the physical device for laboratory examination.