Trezor instructed customers on October 30, 2026, who purchased devices through former reseller CryptoBilis since March to transfer their assets. The alert followed a suspected hardware implant report inside a Safe 5 model purchased in Southeast Asia.
An Indonesian customer reported finding an unauthorized circuit board inside a unit acquired on Tokopedia in August 2026. The customer immediately alerted the manufacturer regarding the physical alteration discovered during inspection.
To the resellers who helped build Trezor: thank you, and I’m sorry 💔 pic.twitter.com/RK7KBJOshp
— Danny (@Dantoshi) October 13, 2026
The secondary board could intercept data shown on the display, including seed phrases, and relay information across cellular communication networks without requiring modified firmware or local internet access.
Trezor stated it had not yet received the hardware at its testing laboratory. As of publication, the company confirmed zero documented financial losses directly tied to this specific unit.
Supply chain scrutiny and reseller oversight
Danny Sanders, chief commercial officer at Trezor, indicated the firm chose early disclosure to mitigate potential user exposure. The company declined to disclose the volume of hardware sold through CryptoBilis.
The development follows disclosures on October 9, 2026, where unauthorized implants surfaced in rival products. At that time, Ledger confirmed hardware tampering on a device sourced through that identical reseller outlet.
Trezor acknowledged that existing physical safeguards, such as tamper-evident tape, cannot entirely prevent sophisticated supply-chain interference. The company is re-evaluating its hardware integrity validation workflows.
Security analyst Joe Grand notified Trezor in August 2026 regarding modified Model T and Trezor One units sold through unofficial social channels. Trezor explained standard firmware validation checks only verify software integrity, not passive optical or display intercepts.
These supply chain vulnerabilities follow historical operational hurdles, including compromised customer contact data documented during external fulfillment provider breaches. Consequently, Trezor announced structural reductions to its authorized reseller directory on October 13, 2026.
Laboratory examination results on the recovered hardware component remain pending.
This article is for informational purposes only and does not constitute financial advice.
