Trezor Reduces Resellers Amid Ledger Tampering Reports
Trezor, a leading hardware wallet manufacturer, has taken a preventive step by restricting some resellers, despite not finding any evidence of its own devices being compromised. This move comes in response to reports of malicious implants in Ledger hardware wallets, which exposed recovery phrases.
Background:
- Trezor's Announcement: In a recent X post, Trezor stated that there was no evidence of its devices being tampered with, but it would reduce its reseller network due to recent supply-chain incidents.
- Ledger's Confirmation: Ledger recently confirmed that a device purchased from a Southeast Asian reseller, CryptoBilis, contained an unauthorized hardware implant, potentially leading to significant losses for users.
- Investigation and Impact: Blockchain researchers estimate that between $72 million and $86 million in user funds may have been lost due to these breaches. Ledger has not yet confirmed the total impact.
Trezor's Response:
- Reduction in Resellers: Trezor's Chief Commercial Officer (CCO), Danny Sanders, notified certain resellers that they would be removed from the company's authorized list starting January 1, 2027.
- Shipment Halt: The company has also stopped shipments of Trezor devices, effective Tuesday, October 13, 2026.
- Safety Measures: Trezor emphasizes that their setup checks are designed to catch counterfeit devices and modified firmware. However, the implant found in CryptoBilis' devices works differently, reading information from the screen and transmitting it to attackers.
Recommendations for Users:
- Purchase Trezor products directly from the company and ensure the seal is intact.
- Consider using a multisignature wallet with devices from different manufacturers to enhance security.
Related Topics:
- [Ledger investigates fund losses linked to Southeast Asian reseller, warns users](link to relevant article)
- [Do the Coldcard attacks mean all hardware wallets are now insecure?](link to relevant article)