Trezor will stop authorizing third-party resellers on January 1, 2027, the hardware wallet maker said, weeks after rival Ledger confirmed that devices sold through a Southeast Asian retailer contained a hidden implant designed to steal recovery phrases.
The two events aren't officially linked, but they land in the same uncomfortable place: the moment a hardware wallet leaves the factory, the chain of custody becomes a security surface. Trezor's move effectively eliminates that surface for its own products. Ledger's discovery shows what happens when someone else controls the box before it reaches a customer.
What Ledger found inside the box
Ledger said wallets sold by a Southeast Asian retailer carried a concealed implant that captured users' recovery phrases — the 12- or 24-word backup that restores a crypto wallet on any compatible device. Once a recovery phrase is exposed, an attacker doesn't need the physical wallet anymore. They can rebuild the keys elsewhere and drain the funds.
The company didn't say how many devices were affected or which specific retailer was involved. It confirmed the implant existed and that it had been shipped to users through a reseller. That's the supply chain gap in plain terms: a product that's supposed to keep keys offline was compromised before the buyer ever opened the packaging.
Hardware wallets are designed around a simple threat model. The private key never touches the internet, so remote hackers can't grab it. But that model assumes the device itself is genuine. A tampered unit can look identical to a legitimate one, pass a basic setup check, and still leak the seed phrase the moment it's generated.
Trezor's answer: cut out the middleman
Trezor's decision to end reseller authorizations is a direct response to that assumption. Starting January 1, 2027, the company will only sell through its own channels. No third-party retailers, no marketplace listings, no gray-market stock.
The trade-off is reach. Resellers put hardware wallets on shelves in countries where direct shipping is slow, expensive, or unreliable. Cutting them off could make it harder for some users to buy a Trezor at all. Trezor hasn't said how it plans to handle those markets, or whether it will open regional distribution hubs of its own.
What it does do is shrink the number of hands a device passes through. Every additional party between the factory and the end user is a potential point of compromise — a warehouse worker, a shipping contractor, a retail employee with access to inventory. Trezor is betting that fewer hands means fewer chances for an implant to slip in.
The reseller problem isn't new
Hardware wallet makers have warned about tampered devices for years, but warnings are cheap. Ledger's confirmation turns a theoretical risk into a documented one. The implant didn't break cryptography. It broke logistics.
For users, the practical advice hasn't changed: buy directly from the manufacturer when possible, check the packaging for signs of tampering, and never trust a pre-filled recovery phrase. A legitimate device will generate a new seed during setup. If one shows up already written down, that's not a feature — it's the attack.
Ledger hasn't said whether it will pursue legal action against the retailer or how it identified the affected units. The company confirmed the implant after investigating reports from users. It's not clear whether other resellers in the region sold similar compromised stock.
What happens between now and 2027
Trezor's reseller authorizations remain valid until the end of 2026, which gives existing retail partners more than two years to sell through inventory. After that, any Trezor sold by a third party won't be an authorized reseller — and buyers won't have the same assurance that the device came straight from the factory.
The company hasn't announced a replacement distribution strategy. It also hasn't said whether it will offer a verification tool so buyers can check whether a device passed through authorized channels. Without that, the burden falls on the user to figure out whether the box in their hands is legitimate.
Ledger, for its part, continues to sell through resellers. The company confirmed the implant but hasn't announced any changes to its own retail partnerships. That leaves an open question for anyone shopping for a hardware wallet right now: if a tampered device can reach a customer through an authorized retailer, what does "authorized" actually guarantee?
