The circuit allegedly added to a Trezor Safe 5 purchased from CryptoBilis was reportedly able to transmit the recovery words displayed on the screen over a cellular network.
According to a Trezor statement reported by The Block, the suspicious device was purchased from Tokopedia through CryptoBilis in August 2026. The company received the report on October 28 and found the claim credible after speaking with the customer over a video call; the device has not yet been collected for a detailed physical inspection.
Claim of an additional circuit between the main board and screen
The report alleges that an additional circuit board was placed between the device’s main board and screen. The board is said to contain a cellular communications module and antenna, allowing it to read information displayed on the screen and transmit it over a cellular network.
The information that could be read includes the wallet’s recovery phrase. If these words, which are used to restore a wallet, are obtained, the security of its assets could be directly at risk. However, the described mechanism comes from the report about the suspicious device and has not yet been confirmed by Trezor’s inspection of the device.
New devices to be sent to affected customers
Danny Sanders, Trezor’s commercial affairs executive, said the company chose to issue a warning in advance rather than risk a user losing funds while they waited for confirmation. The company recommends that customers who purchased a Trezor from CryptoBilis starting in March 2026 move their funds to a new wallet and contact the support team. It also announced that new devices will be sent to these customers.
We covered the warning to this customer group and the recommendation to create a wallet using new recovery phrases in our previous report. The detailed statement explains how the suspicious hardware could transmit information and provides details about device support.
Trezor removed CryptoBilis from its authorized reseller network after reports that Ledger devices purchased from the same seller had been tampered with. No signs of tampering were found in the other four Trezor devices the company has inspected so far; no user losses have been reported in the Trezor case.
Not investment advice.