Hardware wallet maker Trezor announced on October 13, 2026, that it will shrink its roster of authorized resellers, with selected partners losing their official status on January 1, 2027.
The digital security focused company framed the decision as a forward-looking safeguard after recent reports of devices being altered before reaching customers.
In a public statement, Trezor stressed that it has found no indication any of its own units were interfered with and described the change as an abundance-of-caution measure intended to improve oversight of the partners that remain.
The timing follows confirmation by rival manufacturer Ledger that at least one of its wallets, sold through the Southeast Asian reseller CryptoBilis, contained an unauthorized component.
That implant was designed to capture the recovery phrase displayed on the screen during setup and transmit the information over a cellular connection via an embedded eSIM, without altering the device’s core secure element or firmware.
On-chain analysts have estimated losses tied to the incident in the range of tens of millions of dollars, though Ledger has not independently verified the precise total. Trezor had already removed CryptoBilis from its own authorized list days earlier and reported no customer complaints of similarly modified Trezor devices from that seller.
Chief Commercial Officer Danny Sanders shared a letter informing affected partners that no new inventory would ship to them immediately and that their authorization would formally end at the start of 2027.
Remaining stock could still be sold through the holiday period, including Black Friday promotions.
Sanders noted that the company evaluated markets individually, weighing revenue, local distribution reach, and its own direct presence, and that surviving partners would face tighter contractual requirements around sourcing, storage, and handling.
The company has not disclosed how many resellers are being removed or which regions are primarily affected.
Earlier in 2026, Trezor also dealt with a separate data exposure at logistics partner ShipMonk that involved customer contact and order details, reinforcing concerns about third-party links in the chain.
While the move signals a willingness to prioritize tighter control over distribution, it arrives after substantial losses have already occurred across the industry and addresses only one narrow slice of the risk surface.
Hardware wallets remain exposed to a wide range of potential weaknesses that go well beyond reseller handling.
Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with.
Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised.
This is a preventive step, taken… https://t.co/pKF4tCHo5c
— Trezor (@Trezor) October 13, 2026
Earlier in 2026, for example, Coldcard devices were affected by a long-standing firmware issue in which seed generation sometimes relied on insufficiently random software processes rather than the intended hardware random-number generator.
That defect allowed attackers to reconstruct private keys offline and drain funds totaling more than $100 million without any physical access to the devices or supply-chain interference.
Such episodes illustrate that offline storage devices can be undermined at multiple points: during manufacturing or distribution, through subtle software flaws in entropy generation, via screen-reading implants, or even through compromised packaging and documentation.
Reducing the number of authorized sellers may limit one avenue of post-factory tampering, yet it does not eliminate the underlying architectural challenges of relying on specialized physical hardware that must travel through complex global logistics networks and still remain trustworthy for ordinary users.
As the cryptocurrency sector looks toward broader adoption in 2027 and beyond, these recurring incidents suggest that incremental refinements to the current hardware-wallet model may prove insufficient.
Achieving reliable custody at mainstream scale will likely require fundamentally different approaches—whether through improved multi-party computation schemes, better-integrated software-hardware hybrids with continuous verification, or entirely new paradigms that reduce dependence on single physical tokens whose integrity cannot be fully guaranteed once they leave the factory floor.
Until such alternatives mature and gain wide acceptance, users will continue to face the tension between the convenience of self-custody devices and the persistent, multi-vector threats that have already resulted in significant losses.