Trezor is shrinking its authorized reseller network after rival Ledger confirmed a supply-chain tampering incident involving a physical implant in at least one hardware wallet sold through a Southeast Asian reseller. In an official post on X at 13:32 UTC on October 13, Trezor said it will “reduce the number of resellers so we can more effectively check those we work with.” The company added: “Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised,” describing the move as “a preventive step, taken out of an abundance of caution.”
A letter to partners signed by Chief Commercial Officer Danny Sanders set out the mechanics. Affected resellers stop receiving new stock immediately, and their authorization ends on January 1, 2027. They may keep selling existing inventory through the holiday season. Trezor has not disclosed how many resellers are being dropped or which markets are affected. Sanders wrote that the decision is “not a verdict on your business or on the safety of the devices you sell” but rather a question of how many partners Trezor can check closely. Trezor dropped CryptoBilis from its reseller list on October 12 as a precaution.
The broader concern follows Ledger’s confirmation that at least one wallet sold by CryptoBilis carried an unauthorized implant that read users’ 24-word recovery phrases. On-chain analysts have put losses across affected wallets at more than $86 million. A supply-chain attack targets the journey between factory and customer: instead of breaking device cryptography, an attacker tampers with hardware itself. For existing Trezor owners, the company says there is no confirmed compromise and no reports of tampered Trezor devices. For prospective buyers, Trezor pointed customers toward official fulfillment centers listed on its support site. Neither company has confirmed fund losses, compromised seed phrases, or identified specific affected devices beyond the reported reseller case. Trezor has not announced hardware-level changes such as tamper-evident packaging or added authenticity checks.
