Trezor Reduces Reseller Network After Supply Chain Incidents

On October 13, 2026, Trezor, owned by SatoshiLabs, announced a reduction in its network of authorized resellers following supply chain incidents that raised concerns about device tampering across the hardware wallet industry.

The first to be removed from the list was CryptoBilis. This choice is not accidental: this reseller is linked to a major incident involving Ledger devices, where losses are estimated at $86–103 million—mostly in wallets with USDT on the Tron network. Trezor describes the broader reduction as a preventive measure and states that there is no evidence of compromise of its own devices.

CryptoBilis was removed from the list of sellers on October 11, two days before the announcement of the broader reduction. The company described this as a precautionary measure following reports of Ledger device tampering. Ledger has linked hundreds of wallet depletion cases to devices sold through CryptoBilis. Since then, CryptoBilis has completely ceased selling hardware wallets.

The cleanup is not limited to one seller: Trezor plans to update the reseller page after the New Year, and the updated version is expected to show a narrower list of authorized partners.

A hardware wallet stores private keys offline, away from internet-connected computers. Its value depends on the device arriving exactly as assembled by the manufacturer. A supply chain attack targets this path: instead of hacking cryptography, the attacker interferes with the product somewhere between the factory and the buyer.

This is not Trezor's only issue in 2026. In August 2026, a leak at logistics provider ShipMonk exposed personal data of up to 81,000 Trezor customers, with most records dating from 2019–2021. Wallet keys and funds were not affected by that incident.