A suspected malicious electronic component has been reported inside a Trezor Safe 5 hardware wallet that was purchased through the e-commerce platform Tokopedia from CryptoBilis, a former authorized Trezor reseller. Trezor confirmed the report in an official blog post after an Indonesian user raised the alarm with the company.

According to the announcement, the affected device was bought on Tokopedia from CryptoBilis, which is no longer listed among Trezor's authorized resellers. The company has been warning customers who purchased its products from CryptoBilis since March 2026, according to the report first published by COINOTAG.

The case underscores why purchase channels matter for hardware wallets. The Trezor Safe 5 is a hardware wallet designed to keep the private keys controlling cryptocurrency funds offline, and its security depends on the device reaching the user without physical interference. Physical tampering with hardware wallet components is a recognized supply-chain risk in the industry, because a vendor's distribution controls — its official store and vetted resellers — end where third-party marketplace listings begin. Devices acquired from sellers outside that chain are the buyer's responsibility to verify before use.

Trezor, developed by Prague-based SatoshiLabs, has long advised customers to buy devices only through its official store or verified resellers and to confirm a device's integrity during initial setup. That guidance is anchored in the company's published list of authorized resellers, from which CryptoBilis no longer appears. Buyers uncertain about where their device came from can compare their seller against the current reseller list and review Trezor's official blog post confirming the report, which remains the company's primary channel for guidance on this case.

The original report was first published on COINOTAG: https://en.coinotag.com/trezor-safe-5-implant-cryptobilis-migration-warning