{"schema_version":"0.10.0","id":"LR-2026-0291","record_version":1,"title":"Trezor Safe 5 from reseller CryptoBilis found with implant board exfiltrating recovery phrase over cellular network","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":61.9,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":6.72,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-31","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-10-31","history":[{"date":"2026-10-31","from_level":null,"to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"437dc6ef3417af7eb8b84dca4b97e6ba2c692acbf6ad4d49f2136348c201a95d"},"system":{"model_name":"Trezor Safe 5","model_version":null,"developer":"Trezor","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"production","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"hardware wallet","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-30","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"victim","summary":"A customer in Indonesia who bought a Trezor Safe 5 hardware wallet from reseller CryptoBilis in August, through the marketplace Tokopedia, reported that the device contained an extra circuit board. The board sits between the wallet's main board and its screen, with a cellular module and an antenna, and reads the screen, including the recovery phrase, sending it out whenever the device is plugged in. The customer noticed a weight difference and had moved his funds off the wallet before he found the board. Trezor has not examined the device but found the report believable enough to warn all CryptoBilis buyers since March 2026 to move funds to a new wallet with a new recovery phrase. Trezor dropped CryptoBilis on October 9 after Ledger began investigating losses among its own customers who had bought from CryptoBilis.","tags":["supply-chain","hardware-implant","credential-theft","cryptocurrency-wallet","recovery-phrase-exfiltration","cellular-exfiltration"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":"unknown","adversarial_actor":"unknown","input_provenance":null,"time_to_contain":null,"operations_paused":"Trezor immediately stopped device sales through CryptoBilis on October 9, 2026.","remediation":"Trezor will ship you a new device or give you a voucher that covers the cost of one.","precursor_events":"Trezor dropped CryptoBilis, its authorized reseller in Southeast Asia, on October 9, after hardware wallet maker Ledger began investigating losses among Ledger customers who had bought from CryptoBilis."},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate: the recovery phrase of a tampered device was exposed and Trezor advised every CryptoBilis buyer since March 2026 to move funds, a bounded scope, but no buyer has reported losing funds.","harm_class":["privacy","third_party_security"],"affected_description":"every Trezor model bought from CryptoBilis since March 2026, from any store that sold devices CryptoBilis supplied, including its store on Tokopedia","protected_class_involved":null,"data_categories_exposed":["credentials"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://thehackernews.com/2026/10/trezor-warns-of-suspected-hardware.html","publisher":"The Hacker News","date":"2026-10-30","type":"press","title":"Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://www.bleepingcomputer.com/news/security/trezor-warns-of-suspected-crypto-theft-implant-in-hardware-wallet/","publisher":"BleepingComputer","date":"2026-10-30","type":"press","title":"Trezor warns of suspected crypto-theft implant in hardware wallet","archived_url":null,"attachment":"fingerprint","independence":"independent"}],"per_field_confidence":{"system.model_name":"C","system.developer":"C","system.autonomy_level":"D","system.deployment_context":"C","system.intended_use":"C","event.date_disclosed":"C","event.trigger":"D","event.detection_method":"C","event.summary":"C","event.tags":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.operations_paused":"C","event.remediation":"C","event.precursor_events":"C","event.incident_class":"C","impact.severity":"C","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity_because":"C","context.industry":"C","context.country":"D","context.denominator_available":"D","context.incident_evidence":"C"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."}],"system.developer":[{"source_index":0,"quote":"Trezor has not yet examined the device."}],"system.deployment_context":[{"source_index":0,"quote":"He bought the wallet from CryptoBilis in August, through the marketplace Tokopedia."}],"system.intended_use":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."}],"event.date_disclosed":[{"source_index":0,"quote":"Trezor said in a blog post on October 30 that the report came in two days earlier from a customer in Indonesia."}],"event.detection_method":[{"source_index":0,"quote":"The customer noticed a weight difference, but small differences can have other causes."}],"event.summary":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."},{"source_index":0,"quote":"He bought the wallet from CryptoBilis in August, through the marketplace Tokopedia."},{"source_index":0,"quote":"The board sits between the wallet's main board and its screen, with a cellular module and an antenna, according to the report."},{"source_index":0,"quote":"It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in."},{"source_index":0,"quote":"The customer noticed a weight difference, but small differences can have other causes."},{"source_index":0,"quote":"The customer had moved his funds off the wallet before he found the board."},{"source_index":0,"quote":"Trezor has not yet examined the device."},{"source_index":0,"quote":"Trezor finds the report believable enough to warn buyers now."},{"source_index":0,"quote":"Trezor dropped CryptoBilis, its authorized reseller in Southeast Asia, on October 9, after hardware wallet maker Ledger began investigating losses among Ledger customers who had bought from CryptoBilis."}],"event.tags":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."},{"source_index":0,"quote":"The board sits between the wallet's main board and its screen, with a cellular module and an antenna, according to the report."},{"source_index":0,"quote":"It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in."},{"source_index":0,"quote":"Trezor dropped CryptoBilis, its authorized reseller in Southeast Asia, on October 9, after hardware wallet maker Ledger began investigating losses among Ledger customers who had bought from CryptoBilis."}],"event.responsible_party":[{"source_index":0,"quote":"It does not know who is responsible."}],"event.adversarial_actor":[{"source_index":0,"quote":"It does not know who is responsible."}],"event.operations_paused":[{"source_index":1,"quote":"In response to the Ledger incident, and before it had any indication it was impacted, Trezor immediately stopped device sales through CryptoBilis on October 9, 2026."}],"event.remediation":[{"source_index":0,"quote":"Keep the CryptoBilis device and contact Trezor Support. Trezor will ship you a new device or give you a voucher that covers the cost of one."}],"event.precursor_events":[{"source_index":0,"quote":"Trezor dropped CryptoBilis, its authorized reseller in Southeast Asia, on October 9, after hardware wallet maker Ledger began investigating losses among Ledger customers who had bought from CryptoBilis."}],"event.incident_class":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."},{"source_index":0,"quote":"It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in."}],"impact.severity":[{"source_index":0,"quote":"Trezor's advice covers every Trezor model bought from CryptoBilis since March 2026, from any store that sold devices CryptoBilis supplied, including its store on Tokopedia:"},{"source_index":0,"quote":"No CryptoBilis buyer has reported losing funds to Trezor, which cannot see what customers hold in their wallets."}],"impact.harm_class":[{"source_index":0,"quote":"It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in."}],"impact.affected_description":[{"source_index":0,"quote":"Trezor's advice covers every Trezor model bought from CryptoBilis since March 2026, from any store that sold devices CryptoBilis supplied, including its store on Tokopedia:"}],"impact.data_categories_exposed":[{"source_index":0,"quote":"It reads the screen, including the recovery phrase (Trezor calls it the wallet backup), and sends it out whenever the device is plugged in."}],"impact.severity_because":[{"source_index":0,"quote":"No CryptoBilis buyer has reported losing funds to Trezor, which cannot see what customers hold in their wallets."},{"source_index":0,"quote":"Trezor's advice covers every Trezor model bought from CryptoBilis since March 2026, from any store that sold devices CryptoBilis supplied, including its store on Tokopedia:"}],"context.industry":[{"source_index":0,"quote":"A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported."}],"context.incident_evidence":[{"source_index":0,"quote":"Trezor has the customer's photos and description and has interviewed him on a video call."},{"source_index":0,"quote":"It is arranging for the wallet to be sent to its lab."}]},"notes_on_gaps":"This is a hardware supply-chain tampering incident, not an AI/ML system failure; no model, agent, or autonomous software is described, so agent_involved is false and failure_class is null. The document does not state when the implant was installed, when the customer first noticed the weight difference, or how many devices were affected. No monetary loss is stated; 'No CryptoBilis buyer has reported losing funds' means direct_loss_usd is null, not zero. The customer's country is Indonesia but the operator (Trezor) country is not stated, so context.country is unknown. Severity is a judgement call: recovery phrase exposure is a credential compromise with a bounded population (CryptoBilis buyers since March 2026) and no reported losses, so moderate. The document also describes a separate Singapore Police Force advisory about Ledger wallets; that is a distinct incident and is reported as its own record. Extractor proposed values without quotes; dropped: ['context.country', 'context.denominator_available', 'event.agent_involved', 'event.root_cause', 'event.trigger', 'system.autonomy_level']. Single secondary source; corroborate before upgrading any field to B. This is a hardware supply-chain tampering report, not an AI/ML system incident; no model, agent, or autonomous software is described, so agent_involved is false and failure_class is null. The implant is described as 'suspected' and 'unconfirmed'; Trezor had not examined the device. Date occurred is not stated (purchase was August 2026; the user's discovery date is not given). Date disclosed is taken from the collector's publication metadata, not from the article text. The $3,500,000 figure in the article refers to Ledger user losses from a separate incident, not to this Trezor event, so it is not recorded here. No loss figure, record count, or affected-user count is stated for the Trezor incident. Country of the operator is not stated; the affected buyer is Indonesian. incident_class is set to security_compromise as the closest fit for a tampered device exfiltrating secrets. Extractor proposed values without quotes; dropped: ['context.country', 'context.denominator_available', 'event.agent_involved', 'event.date_disclosed', 'event.trigger', 'system.autonomy_level']. Single secondary source; corroborate before upgrading any field to B. [2026-10-31: evidence level set: Confirmed (2 independent outlets)]"},"context":{"industry":"hardware wallet manufacturing","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":{"log_completeness":null,"tamper_evidence":null,"timestamp_reliability":"unknown","investigation_independence":"internal","redaction_summary":null,"analysis_method":"human_review","prompt_output_retention":null},"regulatory":null,"coverage":null}}