Trezor is terminating its reseller agreements to enhance security measures after Ledger discovered a spy implant in wallets sold by a third-party.
Trezor Ends Reseller Partnerships Following Security Breach
Trezor is set to terminate its agreements with authorized resellers, effective January 1, 2027, in light of a recent security incident involving rival Ledger. This decision comes after Ledger's findings of a hidden spy implant in wallets sold by Southeast Asian reseller CryptoBilis.
The company announced on X that it found no evidence of its devices being compromised but is taking this precautionary measure to ensure a more secure supply chain. Trezor stated, "There is not a single piece of evidence that our devices have been compromised," emphasizing that the move is intended to enhance oversight of its partners.
Ledger's Donjon security team reported that the compromised wallets contained an unauthorized component capable of capturing recovery phrases displayed on the screen and transmitting them via LTE. This undetected implant does not affect the device's appearance or functionality, making it particularly concerning for users.
As part of the changes, affected resellers will not receive new stock but can continue selling existing inventory through the holiday season. Trezor's Chief Commercial Officer, Danny Sanders, noted that the decision reflects the company's desire to closely vet its partners, stating, "This is a precautionary measure to protect our supply chain and our customers." Resellers that remain will face stricter guidelines regarding how devices are sourced and handled.
While Trezor has not disclosed the total number of affected resellers, it has assured customers that it is actively monitoring the situation and has already removed CryptoBilis from its list of authorized sellers. The company reiterated its long-standing advice to purchase only from official sources to avoid counterfeit products.
This latest development follows previous issues Trezor faced, including a data breach that exposed customer information earlier this year, although it maintained that private keys and wallet backups remained secure. Both Trezor and Ledger have strongly warned against purchases from unauthorized sellers to safeguard users' assets.
