Trezor Tightens Reseller Rules After Ledger Implant Alert

Trezor will end authorization for some hardware wallet resellers on 1 January 2027 and stop supplying them with new stock. The company has not named the affected partners or given their number; they may sell existing inventory through the holiday season. Trezor describes the move as precautionary and says it has no evidence its devices were compromised. It had already removed Southeast Asian reseller CryptoBilis from its list and reported no tampered Trezor devices linked to the seller. The change follows Ledger’s investigation into devices sold by CryptoBilis. Ledger’s Donjon security team said some contained an unauthorized implant that could capture recovery phrases shown on screen and transmit them over LTE. Ledger advised recent buyers not to set up affected devices and urged users who had already done so to move funds to a wallet with a new recovery phrase. Onchain investigator Specter has traced more than $86 million in suspected thefts, but Ledger has not verified that figure; earlier estimates cited losses of roughly $93 million to more than $103 million. Trezor also disclosed third-party data incidents this year: a shipping-provider breach affected 80,689 customers, and an email-provider breach exposed about 347,000 newsletter addresses. The company said neither incident compromised its wallets or systems. The developments highlight hardware wallet supply-chain risk, but do not indicate that Trezor devices, crypto networks or digital assets themselves were compromised. Traders and holders should verify device sources and review wallet security.