Key Takeaways
- Trezor is cutting back its authorized reseller network starting Jan. 1, 2027, saying it wants fewer partners and greater control over how its hardware wallets reach customers.
- The decision comes after Ledger’s Oct. 9 security incident, in which attackers allegedly tampered with devices sold through a third-party reseller, resulting in an estimated $93 million in losses.
- Trezor maintains there is no evidence its own devices have been compromised, describing the reseller shake-up as a precautionary move amid growing concerns about hardware wallet supply chain security.
Trezor Tightens Its Distribution Network Following Ledger Security Scare
Trezor Chief Commercial Officer Danny Sanders disclosed the company’s decision to reduce its authorized reseller program, sharing on X a formal letter distributed to select partners. The move is intended to strengthen supply chain oversight and ensure every device’s journey from manufacturer to customer can be thoroughly scrutinized.
“The recent supply-chain attack on another hardware wallet brand confirmed what we have always known. A hardware wallet is only as safe as the path it travels to reach its owner, and every device that passes through hands we cannot properly check puts someone’s savings at risk,” Trezor’s letter to resellers states.
The letter adds:
“So we have made the difficult decision to make our reseller network much smaller, small enough that we can vet and check every partner that remains.”
$93 Million Ledger Incident Casts Shadow Over Hardware Wallet Security
Trezor’s decision follows the Ledger security breach that came to light on Oct. 9, 2026. According to reports, attackers orchestrated a sophisticated physical supply chain compromise, allegedly soldering concealed hardware implants into devices distributed through a third-party reseller, with estimated losses reaching $93 million.
Trezor’s letter confirms that specific reseller partnerships will officially conclude on Jan. 1, 2027, while making clear that the decision does not indicate any compromise of the company’s systems or hardware devices. “Let me be very clear: there is not a single piece of evidence that Trezor devices have been compromised. This is a preventive step, taken out of an abundance of caution,” the company’s letter explains.
A Year of Security Setbacks
Hardware wallet firms have had a terrible year, and there have been close to a dozen incidents involving data breaches, laser fault injection disclosures, a firmware entropy bug, and now the latest supply chain incident. Alongside this, Trezor experienced a data breach in August involving a third-party fulfillment provider, exposing the personal information of tens of thousands of customers.
When it comes to supply chain security, Trezor acknowledges that safeguarding the integrity of its distribution network remains an unrelenting challenge.
“Supply-chain security is never finished, so we are raising the bar for every partner who continues with Trezor, with an updated legal framework and closer checks on how devices are sourced, stored, and handled. We are asking more of everyone in the chain, ourselves included,” the company’s letter states.
Be the first to comment