Hardware wallet manufacturer Trezor has said it has reduced the number of resellers it works with in the wake of supply-chain incidents involving its competitor, Ledger.

The Prague, Czech Republic-based company said in a Tuesday post on X that it is in the process of checking which vendors it works with, and that it has received no reports of any issues with Trezor devices. The company said the reduction would allow it to vet the partners it works with more effectively.

"Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised," Trezor wrote. "This is a preventive step, taken out of an abundance of caution."

Following recent supply-chain incidents, we decided to reduce the number of resellers so we can more effectively check those we work with. Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised. This is a preventive step, taken…

— Trezor (@Trezor) October 13, 2026

Source: Trezor on X

Ledger Investigates Tampered Devices Sold via Reseller

Ledger, which also makes signing devices, said last week it had started an investigation after customers in South East Asia reported losing funds after buying devices from Malaysia-based reseller CryptoBilis.

The company later said one impacted user's device contained an unauthorized hardware implant. More reports of what appear to be tampered devices have since surfaced on social media, but Ledger said Tuesday that devices sold through CryptoBilis have been linked to lost funds, and that it had confirmed an unauthorized hardware implant in just one affected user's device. According to Ledger, the implant was able to read a seedphrase when it appeared on the device. A seedphrase is the set of words that controls access to a wallet's funds, which is why a device that leaks it can expose those funds to theft.

Ledger has not revealed how much money was lost in total, but blockchain investigator Specter said $86 million had been drained from devices.

"We have not confirmed the total number of affected users or the total value lost," Ledger added on X. "Figures circulating online come from third parties and Ledger has not fully verified them."

Ledger did not respond to Bitcoin Magazine's questions.

CryptoBilis has also stopped selling devices, Ledger added. The company advised customers who bought from the reseller not to set up their devices and to contact the Ledger support team.

A Year of Hardware Wallet Attacks

Criminals have repeatedly targeted hardware wallets this year. In July, hackers stole close to $120 million in bitcoin from Coldcard users due to a firmware bug in the devices. Coinkite, the Canadian company that makes the popular products, said the bug led to faulty seed generation, allowing hackers to guess investors' seedphrases.

In a separate incident, Trezor last month reported that close to 81,000 customers had their details leaked after a third-party fulfillment partner had data stolen. Earlier this year, scammers obtained customer information via Global-e, the payment processor used by crypto wallet maker Ledger, and used it to send phishing emails.

Taken together, this year's incidents have touched resellers, device firmware, a partner, and a payment processor — the supply-chain touchpoints Trezor pointed to when it announced it was reducing its reseller network.

This article first appeared on Bitcoin Magazine and was written by Mathew Di Salvo.