Trezor cuts its authorized dealers: the authorizations end on January 1, 2027

Anyone planning to buy a Trezor hardware wallet before Christmas is buying it on different terms than a week ago. The Czech manufacturer announced on October 13, 2026 that it is sharply cutting its network of authorized dealers. Affected partners receive no further stock from the date of the letter and may sell their remaining inventory only until January 1, 2027. After that they are no longer authorized dealers. The trigger does not lie with Trezor itself but with rival Ledger: there, devices reached the market through one reseller with a foreign radio component built in.

For buyers, that shifts the most important question. What matters is no longer which model supports the most assets, but which route the device travelled into your hand. This article sets out what exactly Trezor announced, what happened at Ledger, which deadlines apply and what marks an authorized supply route.

What Trezor announced on October 13

Trezor published the decision through its channel on the platform X; chief commercial officer Danny Sanders had shared the letter to partners shortly before. According to the report by trade outlet The Crypto Times, the decisive sentence to the dealers being dropped reads: “your authorization ends on 1 January 2027”.

The letter sets out three points. First, Trezor supplies the affected partners with no new stock from now on. Second, those partners may continue to sell existing inventory until the authorization expires at the turn of the year. Third, the remaining partners will work under a revised contractual framework in which Trezor looks more closely at where devices come from, how they are stored and how they are handled.

One point matters for context: Trezor states explicitly that there is no indication of tampering with its own devices. The announcement says there is “not a single piece of evidence that Trezor devices have been compromised”. The cut is a precaution, not a response to a loss of its own. The company also said it would review the decision should the situation change.

Supply chain attack: how the implant at Ledger worked

The trigger is an incident at French manufacturer Ledger. On the company’s account, reported by industry outlet CoinDesk on October 13, devices sold through the Southeast Asian reseller CryptoBilis carried an additional radio component. That component read the 24 words of the recovery phrase off the device display and sent them out over a mobile network, technically through a built-in eSIM.

Ledger describes the case as a physical intervention in the supply chain, not as a hole in its own software or internal systems. That is the heart of the matter and the reason a dealer list suddenly becomes a security question: the encryption inside the device stays intact, while the attack sits one step earlier, at the device itself, before it reaches the customer.

Recovery phrase is the sequence of twelve or twenty-four words from which every private key of a wallet can be recalculated. Anyone who knows it has full access to the balance without holding the device. That is why a hardware wallet shows these words only once, and only on its own display: a display that is being read along defeats the whole protection. How that protection works in the normal case, we took apart in our explainer on the hardware wallet.

On the scale of the losses there are only estimates so far, and they diverge. The research arm of Galaxy Digital put the losses at more than $90 million across several hundred addresses. CoinDesk cited on-chain estimates of up to $93.2 million across more than 300 wallets; stablecoin issuer Tether froze 10 million USDT of that, according to the same report. Ledger itself has confirmed neither the number of victims nor a total. The range of roughly $90 million to $93 million is the state of the estimates, then, not an audited tally. The details of the case and the first reactions we recorded in our report on the Ledger incident.

Trezor removed CryptoBilis from its own dealer list on October 12, a day before the big announcement and, on its own account, as a precaution. The reseller was therefore listed at Trezor as well, without any loss becoming known there.

The cut-off date of January 1, 2027 and what applies until then

From a buyer’s point of view the deadline is the most awkward part of the announcement. The dealers being dropped do not lose their authorization at once, but only on January 1, 2027. Until then they may sell down their stock. That means the whole Christmas season and Black Friday still fall under the old order. Trezor names this period in the letter itself, so it is not an accident but a transition deliberately granted to the partners.

For you that has an uncomfortable consequence. Over the coming weeks, devices will sit on shelves and in online shops whose sellers are still formally authorized but will not be from January. A dealer’s status in December therefore says nothing about how Trezor will classify that dealer in January. If the shortest supply route matters to you, check the status now and not when the parcel has arrived.

Authorized dealer, marketplace, reseller: the differences

Three terms are often mixed up in retail, and the difference between them decides the risk.

An authorized dealer is a company that has a contract with the manufacturer and sources its goods directly from it. A marketplace is a platform on which many different sellers offer their wares; the operator of the marketplace is not necessarily the seller. A reseller, finally, buys goods and sells them on, with or without a contract with the manufacturer.

The weak point that the Ledger case has exposed sits precisely in that middle. A device that passes through several hands was unpacked, repacked or stored somewhere along the way. The longer that route, the more opportunities there are to alter the hardware. Trezor describes its own requirement of partners on its help pages as goods that come directly from the manufacturer and are kept apart from other products: “Stock is supplied by us directly and kept separate so that devices are not mixed with other goods.”

Which models exist at all and how they differ in handling, you can look up in our comparison of hardware wallets; the question of the supply route arises in the same way for every one of these devices.

Which supply routes Trezor itself calls safe

On its help page on buying a genuine device, Trezor names its own shop as the best source. Alongside that, the company lists authorized dealers as a legitimate source and points to its own storefront on Amazon. Devices from these channels Trezor calls unproblematic in principle, and for the individual case it points to its own guide on whether a device can be used.

Since October 13 that order has been more than a recommendation. When a manufacturer shrinks its partner network because it does not have enough control over third-party storage routes, buying direct is not merely convenient: it is the option with the fewest stops. Ledger has gone one step further down the same path and sells its new flagship model exclusively through its own shop.

Seals, packaging and firmware: the checkpoints on a new device

An implant inside the case is hard to spot from the outside. Four points still give an indication, and together they cost less than ten minutes.

1. Packaging. Look at the security seals, the film and any traces of glue before the device comes out of the box. A seal that has already been broken is a reason not to put the device into service.
2. Weight and gaps. An additional component in the housing changes both slightly. Anyone with a second device of the same model will notice the difference.
3. First setup. A new device generates the recovery phrase itself. If a phrase is already included, on paper, as a card or as a sticker, the device is no longer new and does not belong in service.
4. Check by the manufacturer. Both vendors offer a genuineness check through their own software. That check argues against swapped firmware, not against every additional component.

The fourth point is where care is needed: a passed genuineness check proves that the software comes from the manufacturer. A radio component that merely reads along does not touch the software. No check on a powered-up device therefore replaces a clean supply route.

Secure element and seed: the blind spot lies in showing the phrase

The secure element is a chip hardened against read-out that stores the private keys and computes signatures without releasing the keys. That design protects well against attacks over the cable, over the software and through an infected wallet app on the computer.

Against an attack that starts at the display it does not help. The recovery phrase has to be shown to the owner once during setup, otherwise they could not write it down. That single moment is the only one in which the secret leaves the device, and in the Ledger case it is exactly that moment the component read along. The lesson is uncomfortable: the hardening of the chip is not the weakest point of a hardware wallet, the route the goods travel is.

Used hardware wallets: the second-hand market stays unverifiable for buyers

For used devices the situation has been even clearer since October 13: a second-hand device cannot be verified by its buyer. They know neither who opened it before nor whether the packaging belongs to the goods. Both manufacturers have advised against this route for years, and the current case supplies the argument after the fact.

Anyone facing the question of whether a hardware wallet is needed at all will find the alternative in a pure software solution, with its own advantages and drawbacks. A software wallet carries no supply chain risk, but its key sits on a device that is connected to the network.

MiCA and consumer protection: what supervision does not cover for hardware

An obvious question is whether the European crypto regulation MiCA applies here. The answer is no. MiCA governs services around crypto assets, that is trading, custody for third parties, exchange and the issuance of tokens, and for those a provider in Germany needs permission from BaFin. A hardware wallet that you manage yourself is not such a service: nobody holds anything for you, the device is a piece of electronics.

That leaves the purchase under general product and sales law. It gives you warranty rights against the seller, but it does not place a supply chain under supervision. This gap is why the manufacturers have to solve the problem themselves, through contract terms and through the length of their dealer lists, and why their announcements have immediate practical consequences for buyers. How far the loss of trust at Ledger already reaches became visible in German retail.

What is documented in the Ledger case and what remains open

Honesty requires separating the two. Documented is this: Trezor is shrinking its dealer network as of January 1, 2027 and names the incident at Ledger as the reason. Ledger traces the confirmed losses to devices sold through a single reseller and describes the attack as a physical intervention in the supply chain. Trezor took that reseller off its own list on October 12.

Open, by contrast, is the total, because the estimates of roughly $90 million to $93 million come from third parties and are not confirmed by the manufacturer. Also open is how many dealers Trezor is dropping and which countries this affects: the company has given no figure. For buyers in Europe that means the list of authorized dealers remains the only reliable source of information, and specifically the list at the time of purchase.

For anyone watching this and wondering how much caution is appropriate: the attack was elaborate, it hit devices from one particular supply route, and on everything that is public it has affected no model and no manufacturer as a whole. Panic is a poor guide here. A verified supply route, by contrast, costs nothing and closes the gap at issue.

Trezor dealers: until January 1, 2027 the old list still holds

Three steps follow from the announcement, and they build on each other.

1. Settle the supply route before you pick a model. Direct from the manufacturer or from a dealer who is on the official list at the time of purchase. Which devices qualify is set out in the comparison of hardware wallets.
2. Weigh up whether a hardware wallet is the right solution. For small holdings a well-secured software solution can be enough; the trade-off is set out in the comparison of software wallets.
3. Classify the devices you already own. Anyone who owns a device from an unclear source will find the checks and the manufacturers’ response in our report on the confirmed implant at Ledger. Setting a device up again necessarily generates a new recovery phrase.

(As of October 17, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)