Trezor will reduce the number of companies authorized to sell its hardware wallets after reports that a Ledger device bought through a Southeast Asian reseller contained a malicious hardware implant. The move is described by the company as a preventative response to recent supply-chain incidents, not as a reaction to evidence that Trezor products were compromised.
Trezor tightens its reseller network
In a Tuesday post on X, Trezor said there was “not a single piece of evidence” that its own devices had been compromised. At the same time, the hardware-wallet maker said it would reduce its reseller base as a precaution and out of an “abundance of caution.”
Trezor Chief Commercial Officer Danny Sanders said he had informed certain resellers that they would be removed from the company’s authorized list from Jan. 1. Shipments of Trezor devices to those businesses were due to stop on Tuesday.
A Trezor spokesperson told Cointelegraph that the company’s checks are designed to identify counterfeit products and altered firmware. The reported Ledger implant operated differently: it did not change the device’s firmware, but instead read information displayed on the screen and later transmitted it to an attacker. Trezor said it had not seen this specific form of attack affecting its devices in real-world use.
Ledger incident raises supply-chain concerns
The decision followed Ledger’s confirmation that at least one hardware wallet purchased from CryptoBilis, an authorized reseller in Southeast Asia, contained an unauthorized implant. The device reportedly captured users’ recovery phrases and sent them over cellular networks, creating a potential route to cryptocurrency theft.
Recovery phrases are the words used to restore access to a crypto wallet. If an attacker obtains them, the wallet’s funds may be exposed, which is why the security of the device and the supply chain through which it reaches customers are important.
CryptoBilis suspended all hardware-wallet sales while the incident was investigated. MediaMarkt’s European parent company also said it had removed Ledger products from its physical stores and online platforms as a precaution.
The full financial impact remains unclear. Blockchain investigators cited in the report estimated losses of between $72 million and $86 million, while Ledger said it had not confirmed either the number of affected users or the total value lost.
Trezor advised customers to purchase devices directly from the company and check that the security seal is intact. Its spokesperson also mentioned multisignature wallets using devices from different manufacturers, a setup in which one compromised device cannot move funds by itself.
Current crypto market picture
Moneyiar market data at 20:33-20:34 on Oct. 13, 2026, showed mixed performance among the listed assets:
- The Sandbox (SAND): $0.0602004019, down 2.63% in 24 hours and 9.88% over seven days.
- edgeX (EDGE): $0.3322733656, down 5% in 24 hours and 26.07% over seven days.
- WOULD: $0.0351412837, up 0.33% in 24 hours and 10.6% over seven days, based on data from Sept. 22, 2026, at 21:04.
- Walrus (WAL): $0.0381992188, up 4.71% in 24 hours and 2.4% over seven days.
These market figures do not indicate the value of losses connected with the Ledger incident; that amount remains under investigation.
