Trezor Cuts Reseller Network After Ledger Supply-Chain Attack
Trezor said on Oct. 13 it is trimming its reseller network: affected partners lose authorization on Jan. 1, 2027. No tampered Trezor devices have been found.

Hardware wallet maker Trezor said on Tuesday, October 13, 2026, that it is shrinking its network of authorized resellers. Partners who received notice will lose the right to sell its devices on January 1, 2027. In a post on X at 9:32 AM ET, the company said the decision follows "recent supply-chain incidents" and stressed that "there is not a single piece of evidence that Trezor devices have been compromised." The trigger is the implant found in Ledger wallets sold by reseller CryptoBilis, which we covered separately.
Details
The terms are spelled out in a letter to partners signed by Trezor Chief Commercial Officer Danny Sanders and seen by Decrypt. Affected resellers will receive no new stock, but may sell what they have through the end of the year, including Black Friday and the holiday season. Sanders wrote that the company reviewed each country separately, weighing resellers' revenue and reach against Trezor's own presence in the market, and called the cut "a precautionary measure to protect our supply chain and our customers." Remaining partners will get an updated legal framework and tighter rules on sourcing, storage and handling of devices. Trezor has not said how many resellers are affected or named them; it maintains a list of authorized sellers on its website.
The move answers an attack on a competitor. On October 13 Ledger confirmed that devices sold by Southeast Asian reseller CryptoBilis contained a foreign module that read the recovery phrase off the screen and transmitted it over LTE. On-chain analysts put the thefts above $86 million, a figure Ledger has not verified. European retailer MediaMarktSaturn pulled Ledger products from its shelves. Trezor had already said on October 12 that it removed CryptoBilis from its reseller list and had "no reports of tampered Trezors from CryptoBilis." It is not Trezor's first vendor problem of 2026: in August the company disclosed a customer-data breach at shipping partner ShipMonk affecting 80,689 people, with its wallets and systems untouched.
What It Means for the Market
Hardware wallets sell offline safety for bitcoin and ether, but the Ledger case showed the weak link can be the device's journey from factory to buyer rather than the chip. Trezor is responding not with a single reseller ban but with an overhaul of its whole retail network, and it is doing so at the start of the holiday season, when wallet sales typically pick up. For the coming weeks, buyers should check the seller against the manufacturer's list and avoid setting up a device if the packaging or contents look off.
For the industry, it means costlier distribution: fewer points of sale, more checks, and probably a larger share of direct sales through manufacturers' own sites. The Ledger investigation is ongoing and the list of affected channels may still grow; live market data is on the daily summary.


