Trezor Tells CryptoBilis Buyers to Move Funds After Suspected Implant Report
Trezor is urging people who bought its devices from reseller CryptoBilis since March to transfer their crypto to a wallet they can trust. The warning follows a report of a suspected hardware implant; Trezor has not yet examined the device but says it is treating the report as credible.
Key takeaways
- Trezor urged customers who bought devices from CryptoBilis since March to move their funds.
- The report concerns a suspected hardware implant in a Trezor Safe 5.
- Trezor has not yet examined the reported device but is treating the claim as credible.
- The reports do not confirm how many devices are affected or establish the implant’s capabilities.

Trezor has advised customers who bought devices through CryptoBilis since March to move their crypto funds, following a report of a suspected hardware implant in a Safe 5 wallet. The company has not yet examined the reported device, but is treating the claim as credible, according to Decrypt.
The warning is precautionary: the available reports do not establish how many devices may be affected or confirm the implant’s capabilities. Buyers in the specified group should follow Trezor’s guidance rather than assume a device is safe because it appears to work normally.
Who should take action?
The warning applies to people who purchased Trezor devices from CryptoBilis since March. Trezor’s reported advice is to move funds held using those devices. If you are unsure whether your purchase came through CryptoBilis or when it was made, check your order records and contact Trezor through its official support channels.
Moving funds safely matters: a recovery phrase—the set of words used to restore a crypto wallet—can give whoever possesses it control over the wallet. Do not enter or share that phrase in response to unsolicited messages or on unfamiliar websites. Use a trusted device and carefully verify the destination before transferring assets.
Why this warning matters beyond one device
This report arrives amid earlier concerns about CryptoBilis-sold hardware wallets: Ledger previously reported finding a hidden LTE chip in devices from the reseller that captured wallet recovery phrases, while a separate investigation examined suspected thefts linked to the reseller. Those reports make the seller and purchase channel important details—not just the wallet brand—but they do not by themselves confirm that the device in Trezor’s latest warning is the same implant or that every CryptoBilis buyer is affected.
For crypto holders, the practical distinction is that a hardware wallet can protect keys from many online threats, but it cannot guarantee safety if the device or its supply chain has been tampered with. The next concrete update to watch for is Trezor’s examination of the reported Safe 5 and any revised guidance identifying affected devices or purchase dates.
Frequently asked questions
Should CryptoBilis buyers move crypto off their Trezor?
Trezor has urged customers who bought devices through CryptoBilis since March to move their funds. Check Trezor’s official guidance for any updates on which devices or purchases are covered.
Has Trezor confirmed a hardware implant in the Safe 5?
No. Trezor has not yet examined the reported device. It is treating the report as credible and has advised the specified CryptoBilis buyers to move their funds.
Which Trezor customers are covered by the warning?
The reported warning applies to customers who bought Trezor devices through CryptoBilis since March. The reports do not specify how many devices may be affected.