Trezor Tightens Reseller Rules After Ledger Wallet Breach

Trezor is reducing its authorized reseller network after reports that Ledger hardware wallets sold through Southeast Asian reseller CryptoBilis contained implants that stole customers’ recovery phrases. Trezor says it has no evidence its own devices were compromised and has not accused the resellers of wrongdoing. Some partners have already stopped receiving shipments and will lose authorization on Jan. 1, 2027; Trezor also plans stricter checks on sourcing, storage and handling. The incident highlights hardware wallet supply-chain risks and has prompted advice to buy directly from manufacturers, check device seals and consider multisignature setups using devices from different makers. Trezor also recommends secure wallet practices, while Ledger advises users who initialized affected devices to move funds to a newly generated wallet with a fresh recovery phrase. Bitquery estimates the CryptoBilis-linked thefts at about $102 million across 324 wallets on six blockchains, higher than earlier estimates of $72 million to $86 million. Ledger has not confirmed the total, and Tether froze about $10 million in related USDT. Ledger says investigated compromised devices were sold through CryptoBilis; MediaMarktSaturn has separately suspended sales of affected Ledger products while reviewing a report from Germany. There is no reported evidence of a wider breach of Ledger’s systems or Trezor devices, and no direct crypto-price impact was identified.