The Shake-Up

Real talk: the vibes in the hardware wallet space are currently off. Following a wild report that rival company Ledger found a literal spy implant in wallets sold by a third-party shop, Trezor is hitting the reset button. The company announced on X that it is terminating its authorized reseller program starting January 1, 2027.

Trezor CCO Danny Sanders confirmed the move, noting that while there’s zero evidence Trezor devices were compromised, they’re choosing to be safe rather than sorry. "This is a precautionary measure to protect our supply chain and our customers," he stated. Affected partners can keep moving existing inventory through the holiday season, but they won't be getting any fresh restocks.

The Ledger Incident

If you’re wondering why they’re acting fast, look at the Ledger drama. Ledger’s Donjon security team discovered that wallets sold by CryptoBilis, a Southeast Asian retailer, were fitted with a hidden component. This sneaky piece of hardware could read your screen and transmit your 24-word recovery phrase—your master key—via LTE using a built-in eSIM. The worst part? The wallets looked and functioned totally normal to the user.

Stay Safe

If you’ve bought a wallet from an unofficial source recently, the golden rule of crypto applies: don’t take risks. Trezor says they’ve already cut ties with CryptoBilis. If you’re worried your device might be compromised, don’t try to pry it open yourself—especially with newer models that have batteries, which is a major L for safety. Reach out to the manufacturer directly through official channels.

Moving forward, Trezor plans to keep a much smaller, tighter group of resellers who will be held to stricter legal and operational standards. Always remember: keeping your keys offline is the move, but buying from verified, official sources is the only way to keep your bags truly secure.

Why it matters

This move marks a major shift in how hardware wallet companies manage their supply chain. As crypto security becomes increasingly mainstream, any vulnerability—even one involving a third-party reseller—threatens to destroy user trust, and Trezor is betting that fewer partners will result in better, more auditable security.