EN
Español
Português (Brasil)
Türkçe
Tiếng Việt
Bahasa Indonesia
Polski
Čeština
Română
Slovenčina
Magyar30 Oct 2026
Trezor says it received a credible report of a suspected hardware implant in a Trezor Safe 5 bought via reseller CryptoBilis, weeks after tampered Ledger devices were traced to the same seller. Former Mt. Gox CEO Mark Karpeles urged buyers since March 2026 to move funds to a brand new wallet.
Exchanges TradeReviewed News Desk
Trezor hardware wallets may have joined Ledger devices in a supply chain attack linked to the Southeast Asian reseller CryptoBilis. Former Mt. Gox CEO Mark Karpeles flagged the issue on X on October 30, writing that Trezor devices sold by CryptoBilis “were also implanted”, according to U.Today.
What Trezor has confirmed so far
Per the report, Trezor said in an October 30 announcement that its security team received a credible report of a suspected hardware implant in a Trezor Safe 5. The device was bought through the Tokopedia marketplace in Indonesia in August 2026. Trezor received the report on October 28 and held a video interview with the customer, but it has not yet examined the device in person.
The described implant is an extra board sitting between the main board and the screen, carrying a cellular module and an antenna. In theory it could capture data such as the recovery phrase and send it over a mobile network once the wallet is plugged in. That matches the advanced implants previously found in Ledger devices sold by CryptoBilis, a case Ledger began investigating on October 9 after suspicious fund losses.
Trezor cut ties with CryptoBilis as an authorized reseller the same day. It has since checked four devices bought by CryptoBilis customers and found no tampering, and says no CryptoBilis customers have reported losing funds linked to the suspected Trezor implant.
What buyers should do
Karpeles advised anyone who bought a Trezor from CryptoBilis from March 2026 onwards to move their crypto to a new wallet with a new recovery phrase right away. He also offered to inspect suspect devices and cover shipping. Trezor’s own advice goes further than a simple restore: it recommends creating a completely new wallet rather than importing the old recovery phrase onto another device, because a seed that may have been captured stays compromised wherever it is used.
What it means for traders
- Buy hardware wallets only directly from the manufacturer or an officially listed reseller, and check the seller is still authorized.
- If a device came from a third-party marketplace, treat its seed as untrusted and generate a fresh one on a verified device.
- Coins you actively trade sit on an exchange anyway, so pick one with a strong security record. Our crypto exchange comparison and testing method show how we rate platforms, with BingX at number 1 and OKX at number 2.
This is not financial advice.
Sources
Follow TradeReviewed on X and our Telegram channel: you hear crypto and trading news here first.
Related reviews
Sources
News is for information only and is not financial advice. More crypto news
You'll hear it here first
Get crypto news first on our Telegram channel.