In this article4 sections
Trezor will revoke authorization for selected resellers on Jan. 1, 2027 and stop shipping them new inventory, according to U.today, in a supply chain overhaul announced days after rival Ledger confirmed that wallets sold through a third-party store carried a hidden implant.
Affected partners were told in a letter signed by chief commercial officer Danny Sanders that they will be delisted from Trezor’s authorized partner list on that date. Trezor said the decision is strictly precautionary and that it has found no evidence its own devices were compromised.
Also readLedger Probes $92.9M Drain Tied to CryptoBilis Reseller
Key facts
- Reseller authorizations end Jan. 1, 2027; partners may keep selling existing inventory, including through Black Friday and the holiday season, but receive no new stock.
- Trezor CCO Danny Sanders wrote in the letter shared on X that there is not a single piece of evidence that Trezor devices have been compromised, calling it a preventive step taken out of an abundance of caution.
- Ledger’s Donjon security team found that wallets sold by Southeast Asian reseller CryptoBilis contained an unauthorized component that reads the screen, decodes the 24-word recovery phrase, and transmits it over LTE via a built-in eSIM, per Decrypt.
- Decrypt reported that onchain investigator Specter traced more than $86 million in suspected thefts, a figure Ledger said it has not verified; News.bitcoin and U.today reported the estimate as about $93 million.
- Trezor said reseller selection per country weighed revenue, distribution capabilities and its own established presence, and did not disclose how many partners are affected.
A smaller network, tighter rules
Trezor told partners their authorization ends on Jan. 1, 2027 in a letter shared on X on Tuesday. “Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with,” the company wrote, according to Decrypt.
The letter sent to departing partners states that the decision reflects nothing about their effort or the way they represented Trezor, and Sanders added that if things change in the future the company will review it. Trezor said fewer resellers means more in-depth security checks, and that partners staying on will face an updated legal framework with closer checks on how devices are sourced, stored, and handled.
Also readAvalanche founder warns AI could expose XRP Ledger bugs
News.bitcoin quoted the letter describing a hardware wallet as only as safe as the path it travels to reach its owner, and said the company called supply-chain security never finished while asking more of everyone in the chain, itself included.
Why it matters
The change hits the resellers who moved Trezor hardware in markets the company decided it can now cover or vet itself, and it removes a purchase route Trezor previously recommended alongside its official shop. Buyers who purchase from unauthorized or counterfeit sellers face documented risks: in May 2022 Trezor warned that counterfeit Model T wallets sold on a Russian marketplace had been opened, resealed, and fitted with replaced components, generating predictable or predefined recovery phrases, per Decrypt.
Ledger advised anyone who bought from CryptoBilis in the past 90 days not to set up their device, and told those who already did to move their funds to a new seed phrase generated on a device bought from Ledger. Both companies, which compete in the same market, have warned buyers against unauthorized sellers. Trezor’s year also included a data breach at shipping partner ShipMonk, which Decrypt said exposed customer data from 80,689 customers, a figure the two other outlets did not carry.
What to watch
The Jan. 1, 2027 termination date is the next fixed event: until then, affected resellers can clear remaining stock through Black Friday and the holiday season, and Trezor has not said how many partners lose authorization. Watch also for whether Ledger verifies or disputes the loss estimates that currently range between outlets, and for any findings from Trezor’s stated investigation into reseller-sold devices.
This is not financial advice, and cryptocurrency markets are volatile and uncertain.
Sources: U.Today, Decrypt, News.bitcoin
