TREE NEWS update: Trezor said its security team received a responsible-disclosure report alleging that a Trezor Safe 5 purchased from Southeast Asian distributor CryptoBilis contained a hardware trojan. The device, bought via Tokopedia in August 2026, reportedly had an extra circuit board with a cellular module and antenna between the motherboard and screen that could read the display and transmit data over mobile networks when powered on. Trezor has not physically verified the device but deemed the report credible and issued the warning; it removed CryptoBilis from its official reseller list on October 9.
Trezor Warns Safe 5 Sold by CryptoBilis May Contain Hardware Implant
The warning matters less for what it proves than for what it admits: supply-chain integrity is only as strong as the reseller channel, and Trezor acted on a report it has not physically verified. Anyone who bought hardware wallets through regional marketplaces rather than official channels now faces a provenance question that firmware checks alone cannot answer. Whether other distributors face similar scrutiny, and whether Trezor's verification of the device confirms or complicates the trojan claim, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.