Trezor announced it will reduce its number of authorized resellers as a preventive measure following reports of compromised Ledger hardware wallets. The company stated there is "not a single piece of evidence" that its own devices have been compromised.
Chief Commercial Officer Danny Sanders notified certain resellers they would be removed from Trezor's authorized list effective January 1, with shipments halting immediately. The company cited "recent supply-chain incidents" as the reason for the action.
The move comes after Ledger confirmed that at least one device purchased from Southeast Asian reseller CryptoBilis contained an unauthorized hardware implant. The compromised wallets captured recovery phrases and transmitted them over cellular networks, potentially affecting millions of dollars in user funds.
According to Trezor, the implant operated through a unique tampering method that reads information displayed on the device screen without modifying the firmware itself. "So far, we have not seen this specific type of attack on Trezor devices in the real world," a Trezor spokesperson said.
CryptoBilis, which was an authorized Trezor reseller, suspended all hardware wallet sales following the investigation. MediaMarkt's parent company also removed all Ledger products from its physical stores and online platforms as a precautionary measure.
Blockchain researchers have estimated losses between $72 million and $86 million, though Ledger reported it has "not confirmed the total number of affected users or the total value lost."
Trezor advised users to purchase products directly from the company while checking that seals remain intact, and recommended considering multisignature wallets using devices from different manufacturers as a security measure.
