Trezor says it has seen a Safe 5 wallet bought in August from CryptoBilis, an official Malaysia-based reseller, containing a physical spyware implant. The added hardware is a separate circuit board with a cellular module plus an antenna, Trezor told Protos. An unverified user report says it captures screen contents including the wallet backup and sends them over a mobile network whenever it is connected to power. Trezor has not tested the device but treats the report as credible and will replace CryptoBilis-sourced wallets. Buyers who acquired one from the reseller after March 2026 were told to transfer funds and contact Trezor. Four other CryptoBilis wallets showed no tampering, and no lost funds have been reported. Trezor dropped the reseller in October following a Ledger hack involving similar spyware.
Why it matters: A reseller-linked tampering case shows that hardware wallets bought through official channels can still carry supply chain risks for users.
Summary by Dextape, based on reporting by Protos. Written with AI from the publisher’s text and checked automatically for copied wording and unsupported figures. Not investment advice.
Headline and excerpt from Protos’s public feed. Protos holds the copyright and publishes the full story; Dextape links to it rather than reprinting it.
The Dextape Desk signs Dextape's own work: briefs on wire stories, the daily market report and desk analysis. Briefs are written by an AI model from the publisher's article text and checked automatically for copied wording, unsupported figures and investment advice before they appear. AI drafts from the editorial desk need corroborating sources and an editor's review before release.
