Trezor asked customers who bought a wallet from Indonesian reseller CryptoBilis since March 2026 to move their funds to a new wallet with a new recovery phrase. A customer reported on October 28, 2026, that a Safe 5 bought in August through Tokopedia contained an additional circuit board between the main board and the screen. According to the report, the board reads what appears on the screen, including the wallet backup, and sends the data through a cellular module and antenna whenever the device is plugged in. Trezor has not yet examined the reported device, but considers the report credible and has inspected four devices bought from CryptoBilis without finding evidence of tampering. No CryptoBilis buyer has reported a loss of funds to Trezor, while Ledger’s Donjon team had previously found a similar implant capable of exfiltrating 24-word recovery phrases from some devices.
Source: Read the original article
