Trezor said it found components in three Safe 5 hardware wallets sold through CryptoBilis that could expose recovery words, and will offer eligible customers a free replacement or refund.
According to a statement reported by Wu Blockchain, Trezor examined devices belonging to 48 users who contacted the company. The three Safe 5 devices found to have been tampered with were sold between August 20 and September 23, 2026, through CryptoBilis and the seller’s Tokopedia and Shopee stores.
Trezor said the components added to the devices were designed to capture recovery words and passphrases. According to the company, as of the date of the announcement, there had been no reports of user funds being stolen.
Who is eligible for a free replacement or refund?
Eligibility for a replacement or refund is not limited to the sales period of the three devices found to have been tampered with. Trezor announced that customers who purchased a device from CryptoBilis starting in March 2026 can request a free replacement or refund.
The company released device firmware update 2.13.1 on November 11 to prevent the identified components from collecting data. Trezor also said it had tightened its supply and storage controls and reduced its seller network by approximately 80 percent.
Not investment advice.