Trezor Cuts Reseller Network in Supply-Chain Security Push

Trezor, a major crypto hardware wallet provider, is shrinking the list of retailers authorized to sell its devices.

The decision comes after reports of spyware intended to steal users' crypto in a Ledger wallet sold through a third-party retailer.

Ledger Security Scare Rattles Crypto Wallet Market

A hardware unit sold through CryptoBilis, a Southeast Asian reseller, has been confirmed by rival wallet maker Ledger to contain a hidden implant.

Ledger's security team says the implant captures the 24-word recovery phrase from the display while setup is underway. That phrase is the master key for a wallet. The chip then sends it over a cellular link, according to the company's latest implant update.

Suspected losses are estimated by on-chain researchers at Bitquery to be above $93 million. No total has been confirmed by Ledger.

Every confirmed case is linked by Ledger to CryptoBilis. In the meantime, users claim tampered devices arrived in Europe, though Ledger has not verified that.

How Safe Are Trezor Wallets?

Trezor's letter to resellers being dropped made no mention of Ledger. It pointed instead to a recent supply-chain attack on “another hardware wallet brand.” The company was firm in its stance on its own products.

“Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised,” the Trezor team said.

Danny Sanders, Trezor's chief commercial officer, said affected resellers will have their authorization withdrawn on January 1, 2027. The company has also halted shipments of new stock to them.

They are still allowed to sell their existing stock through Black Friday and the holiday season.

To the resellers who helped build Trezor: thank you, and I’m sorry 💔

— Danny (@Dantoshi) October 13, 2026

Trezor has not revealed how many resellers were removed or where they were located. Each country was assessed on revenue, distribution, and Trezor's existing reach in that country, Sanders said.

Retailers that remain partners must operate under an updated legal framework. Closer checks will also apply to how devices are sourced, stored, and handled.

Ledger has urged all wallet makers to adopt shared anti-tamper standards. For now, Trezor is concentrating on tightening its own sales chain first.