Spy Circuit Board with Cellular Connectivity Discovered in Trezor Wallet

A hidden spy circuit board with a cellular connectivity module has been discovered in the popular Trezor Safe 5 hardware wallet. The vulnerability was identified after purchasing the device from an unofficial reseller in Indonesia.

An Indonesian buyer reported the presence of an additional circuit board located between the main motherboard and the device's screen. This board features a built-in cellular connectivity module and an antenna for data transmission.

The spy equipment is capable of reading information from the display, including the wallet's backup seed phrase. Data is transmitted via the mobile network immediately upon connecting the device to a power source.

Trezor confirmed the credibility of the buyer's report based on his description and video interview. A laboratory check of the physical device has not yet been conducted, but the company has already removed the seller CryptoBilis from its list of authorized partners.

Reseller CryptoBilis was previously involved in a scandal with Ledger. In that case, physical replacement of some devices was confirmed, resulting in damages of approximately $93.2 million.

Trezor strongly recommends all device owners to verify their origin. If you purchased your wallet through unverified sellers, you must transfer your funds to a new hardware wallet with a new seed phrase.

Using the old phrase on another device does not resolve the security issue. If the device has not yet been set up, it is strictly forbidden to turn it on, open it, or weigh it for independent inspection.