Trezor Cuts Authorized Resellers to Tighten Supply-Chain Security

Hardware wallet maker Trezor is shrinking its authorized reseller network in a direct response to the supply-chain tampering that hit rival Ledger. In an official post on X at 13:32 UTC on October 13, Trezor said it will “reduce the number of resellers so we can more effectively check those we work with.”

The company was firm that its own devices have not been affected. “Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised,” Trezor wrote, describing the decision as “a preventive step, taken out of an abundance of caution.”

What the reseller cut changes

A letter to partners signed by Chief Commercial Officer Danny Sanders sets out the mechanics. Affected resellers stop receiving new stock immediately, and their authorization ends on January 1, 2027. They may keep selling the inventory they already hold through the holiday season.

Trezor has not said how many resellers are being dropped, which markets are affected, or what the updated legal framework looks like for partners that remain. Sanders wrote that the decision is “not a verdict on your business or on the safety of the devices you sell” but a question of how many partners Trezor can check closely.

Why resellers became the weak point

The announcement follows Ledger’s confirmation that at least one wallet sold by Southeast Asian reseller CryptoBilis carried an unauthorized implant that read users’ 24-word recovery phrases. On-chain analysts have put losses across affected wallets at more than $86 million. Trezor dropped CryptoBilis from its own reseller list on October 12 as a precaution.

A supply-chain attack targets the journey between factory and customer. Instead of breaking the device’s cryptography, an attacker tampers with the hardware itself, which makes the reseller channel a security surface that manufacturers must now police more closely.

What buyers should watch

For existing owners, Trezor’s message is that nothing has changed on the hardware side: there is no confirmed compromise and no reports of tampered Trezor devices. For prospective buyers, the practical effect is a narrower set of authorized channels, and Trezor pointed customers toward the fulfillment centers listed on its support site for official e-shop orders of Trezor’s hardware wallets.

Trezor has not announced hardware-level changes such as tamper-evident packaging or added authenticity checks, and the affected resellers’ final removal is scheduled for January 1, 2027. The move is part of a broader industry push to tighten oversight of third-party sellers.