Trezor cuts reseller network after Ledger tampering reports hit hardware wallet market

Traders Union
All News
Crypto
Trezor cuts reseller network

Highlights

Trezor reduces its authorized reseller network and halts shipments to affected partners starting Tuesday in response to supply-chain tampering risks reported in the hardware wallet market.
Ledger confirms at least one compromised device sold by Southeast Asian reseller CryptoBilis contained an unauthorized implant stealing recovery phrases, prompting both Trezor and MediaMarkt to cut or suspend hardware wallet sales.
Blockchain researchers estimate user losses from recent wallet security breaches at $72 million to $86 million, while Ledger has not confirmed the full impact or number of affected users as of Tuesday.

Reseller changes follow supply-chain warning

As reported by Cointelegraph, Trezor says the move is a preventive measure taken out of caution after recent incidents involving hardware wallet distribution. In a Tuesday post on X, the company says it has no evidence that its own devices were affected, but it is still reducing the number of resellers in response to supply-chain risks.

Chief commercial officer Danny Sanders says certain resellers have been told they will be removed from Trezor’s list of authorized sellers on Jan. 1. He adds that shipments of Trezor devices to those resellers halt starting Tuesday.

Trezor’s action comes days after Ledger confirms that at least one device bought from a Southeast Asian reseller contained an unauthorized hardware implant. The compromised wallets, sold by CryptoBilis, captured recovery phrases and transmitted them over cellular networks, creating the potential for large user losses.

A Trezor spokesperson says the attack method identified in the Ledger-related case differs from the company’s existing setup checks, which are designed to detect counterfeit devices and modified firmware. The spokesperson says this tampering method reads information shown on the screen and later sends it to an attacker, and adds that Trezor has not seen this specific type of attack on its own devices in real-world cases.

Industry fallout and user fund concerns

CryptoBilis, which is also an authorized Trezor reseller, suspends all hardware wallet sales during the investigation. The parent company of European electronics retailer MediaMarkt also says it has removed all Ledger products from physical stores and online platforms as a precautionary measure.

Blockchain investigators are still assessing the scale of user losses, with research from two individuals putting the figure between $72 million and $86 million. Ledger says Tuesday that it has not confirmed the total number of affected users or the total value lost from the breaches.

Trezor advises customers to buy devices directly from the company, verify that packaging seals remain intact and consider using multisignature wallets with devices from different manufacturers. That approach, the company says, can reduce the risk that a single compromised device is able to move funds on its own.

Our earlier report on the international “Joint Disruption Week” crackdown detailed a coordinated effort to dismantle online scam networks in West Africa, including arrests, device seizures, and the removal of millions of scam-linked social media accounts. The operation also highlighted how authorities and private-sector partners traced potentially freezable funds and underscored the continuing rise in crypto-related investment fraud losses.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.