Trezor Tightens Controls Amid Ledger Tampering Fears

Introduction

Trezor, a hardware wallet producer, has announced it will reduce its number of resellers as a preventative step amid reports of malicious Ledger tampering. The move comes after Ledger confirmed that at least one of its devices purchased by a Southeast Asian reseller contained spy implants that exposed recovery phrases.

Background

Ledger, a competitor of Trezor, has found spy implants in crypto wallets sold by a Southeast Asian retailer, CryptoBilis. The implants captured recovery phrases and transmitted them over cellular networks, potentially leading to millions of dollars in losses for users.

Trezor's Response

Trezor's response came just days after Ledger confirmed the breach. The company said there was no evidence that its devices have been compromised, but would reduce the number of its resellers citing recent supply-chain incidents. Chief commercial officer Danny Sanders notified certain resellers that they would be removed from the company's list of authorized entities on Jan. 1.

Impact

The move highlights the importance of third-party distribution security and the need for manufacturers to question the implications of this practice. Users are advised to buy products directly from Trezor and consider multisignature wallets with devices from different makers to prevent a compromised device from moving funds on its own.

Conclusion

Trezor's decision to reduce its reseller network is a preventative measure taken out of an abundance of caution. The incident highlights the need for increased security measures in the wake of a major security breach at Ledger.