Trezor will remove selected partners from its authorized reseller program on Jan. 1, 2027, Chief Commercial Officer Danny Sanders said in an Oct. 13 letter, as the hardware wallet maker tightens oversight of its distribution network. Trezor said it found no evidence of compromised devices within its network and described the restructuring as a preventive measure.
Trezor to drop selected resellers from authorized list on Jan. 1, 2027
Trezor will remove selected partners from its authorized reseller program on Jan. 1, 2027, Chief Commercial Officer Danny Sanders said in an Oct. 13 letter, as the hardware wallet maker tightens oversight of its distribution network. Trezor said it found no evidence of compromised devices within its network and described the restructuring as a preventive measure.
Sanders said the company could no longer adequately inspect every partner in its existing distribution network, prompting a review of which retailers should remain authorized. "A hardware wallet is only as safe as the path it travels to reach its owner," he wrote. Trezor evaluated individual markets based on revenue, distribution coverage and its ability to reach customers before deciding which partnerships to terminate. The company did not disclose how many businesses would lose authorization or which markets would be affected.
Affected retailers will receive no additional inventory but can continue selling existing stock through the Black Friday and Christmas shopping seasons, and will be removed from Trezor's authorized reseller directory on Jan. 1. Sanders acknowledged the decision could have significant financial consequences for smaller retailers that have built their businesses around Trezor products, but said it did not reflect wrongdoing by the affected partners or concerns about the safety of their existing inventory. "This is not a verdict on your business or on the safety of the devices you sell," he said. Retailers retaining authorization will face stricter contractual requirements and additional inspections covering how devices are sourced, stored and handled.
Trezor's decision follows Ledger's confirmation that attackers installed an unauthorized electronic component inside a wallet sold by CryptoBilis, an official reseller operating in Southeast Asia. Ledger's Donjon security team found the implant could capture the 24-word recovery phrase displayed during wallet setup and transmit the information through an LTE connection using an embedded eSIM, operating separately from the device's Secure Element and operating system. Ledger confirmed the discovery on Oct. 10 and said all verified thefts connected to the incident involved devices purchased through CryptoBilis, which has since stopped selling its products. Ledger maintains that its internal systems and services remain uncompromised.
On Oct. 13, Ledger confirmed that MediaMarktSaturn had suspended sales of its hardware wallets across physical stores and online platforms following a report of an implanted device purchased in Germany. Ledger said it had not reported any financial losses in connection with the German case. Separately, former Mt. Gox chief executive Mark Karpelès reported discovering a spying implant inside a Ledger Flex purchased from a MetaPod outlet at Singapore's Changi Airport, and CryptoQuant analyst Darkfost flagged a reportedly tampered Ledger Flex purchased from Challenger's VivoCity store in Singapore. Those findings have not been independently confirmed by Ledger or linked to the CryptoBilis attack. Darkfost subsequently expanded a watchlist of authorized retailers across Southeast Asia and Europe based on potential distribution exposure, while cautioning that inclusion did not establish compromise.
Independent blockchain investigators have linked suspected losses approaching $93 million to the broader incident, although Ledger has not verified the total value stolen or the number of affected customers. Ledger's Donjon team is examining additional submitted devices as it works to establish the source and extent of the tampering.
- The source does not state how many businesses will lose Trezor authorization or which markets are affected.
- The source does not state whether Trezor coordinated the reseller review with Ledger or any regulator.
- The source does not state where the reported devices were modified or whether the incidents share a common distribution channel.
- The source does not state Ledger's response to the Singapore findings reported by Mark Karpelès and Darkfost.
- The source does not state the basis on which independent blockchain investigators linked losses approaching $93 million to the incident, beyond noting Ledger has not verified the total value stolen or the number of affected customers.
Read the original at CryptoSlate