A Trezor Safe 5 sold by CryptoBilis reportedly had a second circuit board fitted between the main board and the screen. Cellular module, antenna. According to the buyer's report, it reads whatever the screen shows, recovery phrase included, and sends it out over a mobile network whenever the device is plugged in.
Trezor hasn't had the device in its lab yet. It went public anyway, after photos and a video call with the buyer, and says no funds have been reported lost.
This is the same reseller whose Ledger devices turned out to be tampered with earlier this month. Ledger confirmed physically altered devices, OneKey cut ties, and Trezor dropped CryptoBilis on Oct 9. On-chain trackers put Ledger-linked losses above $86M, a figure Ledger hasn't confirmed.
The window is wide. Trezor's warning covers every model bought from CryptoBilis since March, including its Tokopedia store. The reported unit was bought in August.
If that's you: make a new wallet with a new seed and move funds. Typing the old seed into a different device doesn't fix it. Not set up yet? Don't set it up. Trezor is offering a free replacement or a voucher, and says weighing the device is not a reliable test.
Expect fake "recall" emails and calls next. Support never asks for your seed.
$BTC $ETH
#Trezor #CryptoSecurity
NFA. DYOR.
Trezor hasn't had the device in its lab yet. It went public anyway, after photos and a video call with the buyer, and says no funds have been reported lost.
This is the same reseller whose Ledger devices turned out to be tampered with earlier this month. Ledger confirmed physically altered devices, OneKey cut ties, and Trezor dropped CryptoBilis on Oct 9. On-chain trackers put Ledger-linked losses above $86M, a figure Ledger hasn't confirmed.
The window is wide. Trezor's warning covers every model bought from CryptoBilis since March, including its Tokopedia store. The reported unit was bought in August.
If that's you: make a new wallet with a new seed and move funds. Typing the old seed into a different device doesn't fix it. Not set up yet? Don't set it up. Trezor is offering a free replacement or a voucher, and says weighing the device is not a reliable test.
Expect fake "recall" emails and calls next. Support never asks for your seed.
$BTC $ETH
#Trezor #CryptoSecurity
NFA. DYOR.
