After receiving a report of suspicious hardware on a Safe 5 device, Trezor advised customers who purchased devices from CryptoBilis starting in March 2026 to move their assets to wallets created with new recovery phrases.
According to a statement reported by Wu Blockchain, the hardware wallet manufacturer received a credible report that hardware may have been added to a Trezor Safe 5 purchased from CryptoBilis in August 2026. The company has not yet received the suspicious device for physical inspection.
Which users does the warning cover?
Trezor’s precautionary recommendation is directed at customers who have purchased devices through CryptoBilis since March 2026. The company advises these users to move their funds as soon as possible to wallets created using new recovery phrases.
The recommended step is not simply to create a new receiving address; the recovery words used to restore the wallet must also be new. The warning is limited to purchases from a specific seller.
No tampering found in four devices inspected
Trezor removed CryptoBilis from its reseller list on October 9 after receiving reports that Ledger devices purchased from the same seller had been tampered with. We covered developments involving the Ledger devices in our previous report.
No signs of tampering were found in the four devices Trezor has inspected so far. The report concerning the suspicious Safe 5 device is still awaiting investigation. As of the statement, Trezor has received no reports of fund losses from CryptoBilis customers, and the investigation is ongoing.
Not investment advice.