Skip to content
Trezor Revokes Reseller Authorizations Amid Ledger Implant Scandal

Trezor Revokes Reseller Authorizations Amid Ledger Implant Scandal

First seen 18 Oct 2026, 07:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 18, 2026 at 16:08 UTC
  • •Trezor is cutting its authorized dealer network due to a security incident at Ledger.
  • •No evidence has been found that Trezor devices themselves are compromised.
  • •Affected resellers will lose authorization on January 1, 2027, and can only sell existing stock.

Trezor announced on October 13, 2026, that it will cut its authorized dealer network, effective January 1, 2027. This decision follows a security incident involving Ledger, where hardware wallets sold through a third-party reseller contained hidden implants that compromised user recovery phrases. Trezor emphasized that there is no evidence its devices have been compromised, and the move is precautionary. Affected resellers will no longer receive new stock and can sell existing inventory until the authorization ends. The incident linked to Ledger has reportedly resulted in over $86 million in drained funds. Trezor aims to tighten control over its supply chain by reducing the number of resellers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-12
Trezor drops CryptoBilis as reseller
Trezor removed CryptoBilis from its reseller list following concerns about hidden implants in Ledger devices sold through them.
CryptoTimes
2026-10-13
Trezor announces cuts to reseller network
Trezor revealed plans to reduce its reseller network to enhance supply chain security, effective January 1, 2027.
Cryptoticker
2026-10-13
Ledger confirms security breach
Ledger acknowledged that devices sold through CryptoBilis had hidden implants that compromised user recovery phrases.
CryptoTimes

More articles in this cluster (3)

Following this threat?

Track CoinDesk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

What caused Trezor to cut its reseller network?
The decision was prompted by a security incident involving Ledger, where compromised devices were linked to a third-party reseller.
Are Trezor devices compromised?
Trezor has stated there is no evidence that its devices have been compromised.
What should affected resellers do now?
Affected resellers can sell their remaining inventory until January 1, 2027, after which they will no longer be authorized.