Trezor cuts reseller network as Ledger finds spy implant in crypto wallets

Trezor announced the termination of reseller authorizations, effective January 1, 2027, stating there is no evidence its devices were compromised. This follows Ledger's Donjon team finding a spy implant in wallets sold by Southeast Asian reseller CryptoBilis, which captures recovery phrases from the screen and transmits them over LTE. Onchain investigator Specter traced over $86 million in suspected thefts, a figure Ledger has not verified. Trezor described the move as a preventive step to strengthen supply chain vetting.