Trezor has publicly stated it will not use Ledger's recent security incident as a marketing opportunity, emphasizing that user security takes precedence over competitive positioning.
Between October 9-11, 2026, Ledger hardware wallets sold through CryptoBilis, a Southeast Asian reseller, were found to contain unauthorized hardware implants. An estimated $86 million to $103 million was drained from affected wallets, primarily in USDT on the Tron blockchain. Ledger confirmed that all verified incidents traced back to devices sold through the compromised reseller, while its direct sales and internal systems remained secure.
Trezor reported no incidents involving its own devices from the same reseller and emphasized its continued collaboration with industry partners on security matters. Both companies directed users to purchase devices through official channels and follow proper setup protocols.
Trezor's restraint comes amid its own security challenges. In late September 2026, Trezor disclosed a data breach affecting approximately 81,000 customers through ShipMonk, a fulfillment partner. The company stated that device integrity was not compromised by the breach.
The two manufacturers have a history of security disputes. Ledger's research team, Donjon, published findings in March 2025 and June 2026 highlighting physical vulnerabilities in Trezor hardware.
Both the CryptoBilis incident and the ShipMonk breach occurred outside the manufacturers' direct control, affecting different points in the supply chain. Industry observers note that strengthened anti-tamper practices and clearer procurement standards may increase operational costs for hardware wallet makers. A broader loss of user confidence in the hardware wallet category would affect all manufacturers regardless of which devices were compromised.
