Trezor reports a hardware implant in a Trezor Safe 5 bought from reseller CryptoBilis
Through its responsible disclosure program, Trezor received a report of one Trezor Safe 5 with a hardware implant, bought from reseller CryptoBilis in August 2026; the device itself has not yet been provided to the vendor, but it considers the report credible and is warning buyers in advance. No CryptoBilis customer has reported a loss of funds to the vendor. On October 9, 2026, Trezor removed CryptoBilis as a reseller following reports of tampered Ledger devices sold through it; no signs of tampering were found in the four Trezor devices inspected since then.
If you bought a Trezor through CryptoBilis since March 2026: if you are already using the device, move funds to a new wallet with a new seed as soon as possible, and do not use the old seed in any wallet, hardware or software. If you do not have another reliable hardware wallet, Trezor recommends temporarily moving funds to a familiar software wallet or an exchange. If the device has not been set up yet, do not set it up or enter an existing backup into it. Keep the device and contact support for a replacement (linked in the post). Do not share your backup phrase with anyone: Trezor support does not ask for it.
Sources: