Trezor Cuts Its Reseller List as a Preventive Step After Ledger Tampering Reports

Trezor says it will reduce its number of resellers as a preventive step, taken out of an abundance of caution, after reports that malicious implants were found in Ledger devices. The company says there is not a single piece of evidence that its own devices have been compromised.

Chief commercial officer Danny Sanders said certain resellers were told they will be removed from the authorized list on Jan. 1 and must stop shipping Trezor devices from Tuesday, citing recent supply chain incidents. CryptoBilis, an authorized Trezor reseller, has suspended all hardware wallet sales, while MediaMarkt’s parent company pulled Ledger products from its stores and online platforms as a precaution.

How the Hardware Wallet Implant Attack Works

Ledger confirmed that at least one device sold by CryptoBilis contained an unauthorized implant that captured recovery phrases and sent them over cellular networks. A Trezor spokesperson explained that its setup checks catch counterfeit devices and modified firmware, but this attack leaves firmware untouched. It reads information on the screen and later sends it to the attacker. Trezor says it has not seen this type of attack on its devices in the real world.

Estimated Crypto Losses and Safety Advice

Research from two individuals suggests losses between $72 million and $86 million, though Ledger says it has not confirmed the total number of affected users or the value lost. Trezor advises buying directly from the company, checking that the seal is intact, and considering a multisignature wallet with devices from different makers so one compromised device cannot move funds alone.