The hardware wallet manufacturer Trezor has officially responded to security concerns regarding its third-party distribution network. Following reports of potential vulnerabilities, the company announced on October 13, 2026, that it is actively investigating its partnership with the dealer CryptoBilis. While no specific instances of compromised hardware have been confirmed to date, the manufacturer has taken preemptive measures to ensure the integrity of its cold storage ecosystem and the safety of user assets.
Preemptive Measures and Dealer Delisting
As a direct result of the ongoing investigation, Trezor has removed CryptoBilis from its official authorized dealer list and suspended all sales through this channel. This decision serves as a protective barrier while the firm verifies the supply chain integrity of its devices. Despite the removal, Trezor representatives stated on social media that they have not yet received reports of tampered devices sold by the distributor.
- All shipments from the dealer in question are currently halted.
- Technical teams are monitoring for any anomalies in device firmware or physical casing.
- Official support channels have been prioritized for users who purchased via third-party vendors.
Safety Warnings for Trezor Safe 5 and Safe 3 Users
The company also issued a critical technical advisory regarding the physical inspection of hardware. Trezor specifically warned users against attempting to forcibly open the device casing to inspect internal components. This is particularly relevant for the Trezor Safe 7 series, where the built-in battery poses a significant safety risk, including the potential for fire or chemical leakage if the structural integrity is compromised during unauthorized dismantling.
We are actively investigating the situation. Currently, there are no signs that Trezor devices have been affected, but we have removed CryptoBilis from our dealer list as a precaution.
Users are encouraged to verify the holographic seals on their packaging and ensure that the device's bootloader does not report any unauthorized firmware signatures upon initial setup.
Conclusion
The swift response from Trezor highlights the ongoing challenges of maintaining a secure blockchain hardware supply chain. By disconnecting from unverified distributors and emphasizing official support channels, the company aims to mitigate risks associated with supply chain attacks. Investors and cryptocurrency holders are advised to remain vigilant and consult official documentation if they have concerns regarding the provenance of their security modules.
Frequently Asked Questions
Quick answers to the most common questions about this topic.
For educational purposes only. Nothing here constitutes financial or investment advice. Crypto markets are highly volatile — always DYOR before making any decisions.
Fact-checked per our editorial policy. We maintain strict independence from advertisers. Spot an error? Let us know.