CryptoSlate
Trezor will remove selected authorized resellers from its network on Jan. 1, 2027, after an implant attack against rival Ledger exposed risks in hardware-wallet distribution. Affected retailers will receive no additional inventory but can sell existing stock through the Black Friday and Christmas seasons. Trezor said it found no evidence that devices in its own network were compromised.
Why it matters
The Ledger investigation showed how attackers could place an unauthorized electronic component inside a wallet before sale. Ledger said its Donjon team found an implant capable of capturing the 24-word recovery phrase during setup and transmitting it through an LTE connection with an embedded eSIM. The component operated separately from the wallet's Secure Element and operating system, allowing normal transaction signing to continue.
Trezor Chief Commercial Officer Danny Sanders said the company could no longer adequately inspect every partner in its existing distribution network. The company reviewed markets based on revenue, distribution coverage, and its ability to reach customers before deciding which partnerships to terminate. Sanders described the move as preventive, saying a hardware wallet is only as safe as the path it takes to its owner.
Market impact
The changes shift more responsibility toward authorized distributors. Retailers that retain approval will face stricter contractual requirements and additional inspections covering how devices are sourced, stored, and handled. Smaller businesses that lose authorization could face significant financial consequences, although Trezor said the decision was not a finding of wrongdoing or evidence that their existing inventory was unsafe.
The broader incident remains unsettled. Ledger confirmed verified thefts tied to devices sold by CryptoBilis, while reports involving other retailers in Germany and Singapore have not been independently confirmed or linked to the same attack. Independent investigators have linked suspected losses approaching $93 million to the broader incident, but Ledger has not verified that total.
Frequently asked questions
-
Why is Trezor removing some authorized resellers?
Trezor said it could no longer adequately inspect every partner in its existing distribution network. It is tightening supply-chain oversight after an implant attack involving rival Ledger.
-
When will affected Trezor resellers lose authorization?
Trezor plans to remove affected retailers from its authorized reseller directory on Jan. 1, 2027. They can continue selling existing inventory through the Black Friday and Christmas seasons.
-
How did the Ledger implant reportedly compromise wallet security?
Ledger said the implant could capture the 24-word recovery phrase shown during setup and transmit it through an LTE connection using an embedded eSIM. It operated separately from the Secure Element and operating system.
-
Did Trezor find compromised devices in its distribution network?
Trezor said it found no evidence of compromised devices within its network. The reseller restructuring was described as a preventive supply-chain measure.
-
What changes will Trezor make for remaining resellers?
Remaining authorized partners will face stricter contractual requirements and additional inspections covering how devices are sourced, stored, and handled before reaching customers.
TheBlock
CoinTelegraph
Crypto News
CoinDesk
WuBlockchain