Trezor announced the elimination of its authorized reseller network, citing recent supply-chain incidents, just days after rival Ledger confirmed a hidden spy implant in wallets sold by CryptoBilis, a reseller based in Southeast Asia. The covert implant captures the 24-word recovery phrase displayed on screen during setup and sends it via LTE network using an integrated eSIM, without altering the device’s normal operation. The investigation by Ledger’s Donjon security team and on-chain investigator Specter traced over $86 million in suspected thefts, a figure Ledger has not yet verified. Trezor stated there is no evidence its own devices were compromised and that this decision is precautionary, with affected resellers’ authorization ending on January 1, 2027.
Source: Read the original article
