Trezor, a leading hardware wallet provider, has issued a security alert after discovering a suspected hardware implant within its Safe 5 devices purchased through CryptoBilis. The warning comes after a report from Dogecoin community member Mishaboar, who advised users to take swift action if they obtained a Trezor Safe 5 wallet from CryptoBilis from March 2026 onward.
Urgent measures for affected users
Mishaboar urged Dogecoin holders and other affected customers to protect their assets by moving funds to a completely new wallet with a freshly generated recovery seed. He emphasized that simply resetting the device or reusing an old recovery phrase does not guarantee safety.
If you bought a Trezor from CryptoBilis in March 2026 or later, move your funds to a completely new wallet, with a newly generated recovery seed, as soon as possible.
The advice highlights a persistent threat in the digital asset space, where compromised wallet hardware can put users’ funds at risk. He noted that attackers only need to access wallet keys to steal coins, regardless of the physical location or device. Mishaboar also clarified that hardware wallets do not carry the actual coins; instead, they store the private keys required to sign transactions on the blockchain.
Trezor responds to security concerns
Trezor stated that it has not yet physically examined the reported compromised device. However, the company described the report as sufficiently credible to alert its user base. While the Trezor security team continues its investigation, the company reported receiving no fund loss complaints from CryptoBilis buyers so far.
CryptoBilis operates as a third-party vendor for hardware wallets and other cryptocurrency-related products.
Mini dictionary: CryptoBilis is a Malaysia-based retailer that supplies a broad range of cryptocurrency hardware wallets, accessories, and related fintech products to digital asset users in Southeast Asia, serving as a channel for global hardware wallet brands.
Recommendations for wallet security
Industry experts consistently warn users never to share or reuse wallet recovery seeds, especially if wallet integrity is in doubt. Those who have not yet set up their device are cautioned against initializing it with a previous backup phrase or sharing recovery information with others.
Simply resetting the device or importing the same seed into another wallet does not make funds safe either.
Trezor’s alert underscores the ongoing risks connected to hardware wallet supply chains, where manipulation or tampering can compromise the overall security of cryptocurrency holdings. The company urges vigilance, prompt action, and careful handling of all recovery phrases and wallet devices.
