Trezor Reduces Dealers to Strengthen Supply Chain Review
Trezor announced it will reduce the number of dealers due to recent supply chain security incidents to more effectively review partners. The company emphasized that there is currently no evidence that Trezor devices have been compromised, and this adjustment is a precautionary measure.
Chief Business Officer Danny Sanders sent a letter to affected partners, authorizing the termination of their agreements on January 1, 2027, at which point they will be removed from the authorized list. Shipments to these partners will cease from the announcement date, but they are allowed to sell existing inventory until Black Friday and the holiday season. Sanders stated that this decision is not a judgment on the partners' business or the safety of the devices sold, but rather based on the number of partners the company can closely monitor.
The company is evaluating each country individually, weighing revenue, distribution coverage, and its own market presence to ensure customers can still purchase genuine devices. Remaining authorized partners will face updated legal frameworks and stricter checks on device procurement, storage, and handling. The company did not disclose the specific number of reductions or affected markets.
This decision follows a supply chain incident involving competitor Ledger. Ledger devices sold by Southeast Asian dealer CryptoBilis were found to have unauthorized hardware modules implanted that could read recovery phrases on screens and transmit them via LTE without modifying firmware or security components. On-chain analysis estimates related losses at approximately $86 million to $102 million, involving hundreds of wallets, primarily focused on assets like USDT on Tron. Trezor removed CryptoBilis from its dealer list on October 12.
Trezor itself previously experienced a data breach involving logistics partner ShipMonk, affecting the personal information of about 80,000 customers (including names, emails, phone numbers, shipping addresses, and order numbers), but the company's systems and device keys were not affected. The company stated it is accelerating the rollout of anonymous shipping options.
Affected dealers will immediately stop receiving new goods and can only sell existing inventory; remaining dealers must undergo stricter audits to maintain authorization. The incident was driven by the Ledger implantation case, and the contraction of sales channels may shift some demand toward official direct sales. Official channels benefit from enhanced trust, while third-party dealers face revenue pressure, user trust in third-party channels declines, and supply chain review costs increase.
Source: Public Information
ABAB AI Insight
Trezor has long emphasized multi-layered supply chain protection since its establishment in 2013, including firmware hash verification, pre-installed firmware checks, and entropy inspection processes, and has publicly responded to Ledger Donjon's assessment demonstrations of its Safe series devices. In August to September 2026, its logistics partner ShipMonk was breached, resulting in the leakage of personal information of about 80,000 customers. Despite the company's repeated requests for the deletion of data older than 90 days and receiving written confirmation, old records were still retained, exposing ongoing risks in third-party data retention and deletion execution.
Funds and resources are shifting from broad third-party distribution to a smaller, directly reviewable partner network. By terminating some authorizations, halting new shipments, and introducing updated legal frameworks, the company is concentrating review resources on the procurement, storage, and handling processes of remaining partners while advancing anonymous shipping to reduce personal information leakage. This move aims to narrow the trust boundary and reduce exposure to physical implantation attacks, rather than relying solely on software-level detection.
Similar to Ledger's swift request for dealers to stop sales and cooperate with law enforcement following the CryptoBilis incident, hardware wallet manufacturers are shifting from relying on authorized dealers to controlling distribution nodes. The industry is currently transitioning from open channel expansion to supply chain control, with third-party dealers being reassessed as attack surfaces, while official direct sales and strict authorizations become priority paths.
This essentially represents a restructuring of the industry chain. The core risk of hardware wallets has shifted from the cryptography of the device itself to the physical transfer process from factory to user, where implants can read screen information without modifying firmware. Manufacturers are shrinking the number of dealers and strengthening contracts and on-site inspections to transform distribution channels from trust assumptions to verifiable controls, in response to the reality that attackers choose to implant at the distribution rather than production end.
ABAB News · Cognitive Laws
Trust in the supply chain = the reciprocal of the number of reviewable nodes
Device security terminates after leaving the factory; channel review is the endpoint
Expansion of third-party distribution yields benefits while amplifying the attack surface for implants