Hardware manufacturer Trezor has said it has reduced the number of resellers it works with following supply-chain incidents related to its competitor Ledger.
The Prague, Czech Republic-based company added in a Tuesday post on X that it was in the process of checking which vendors it works with.
It added that there were no reports of any issues with Trezor devices. “Let us be very clear: there is not a single piece of evidence that Trezor devices have been compromised,” the company wrote.
“This is a preventive step, taken out of an abundance of caution.”
Signing device manufacturer Ledger last week said it had started an investigation after customers in South East Asia reported they’d lost funds after buying from Malaysia-based reseller, CryptoBilis.
Ledger then said that one of the impacted users’ devices contained an unauthorized hardware implant.
More reports of what appear to be tampered devices have since surfaced on social media but Ledger said Tuesday that only devices sold through CryptoBilis have been linked to lost funds.
It added that it had only confirmed an unauthorized hardware implant in one affected user’s device. The implant, according to Ledger, was able to read a seedphrase when it appeared on the device.
Ledger did not reveal how much money had been lost but blockchain investigator Specter said $86 million had been drained from devices.
“We have not confirmed the total number of affected users or the total value lost,” Ledger added on X. “Figures circulating online come from third parties and Ledger has not fully verified them.”
Ledger did not respond to Bitcoin Magazine’s questions.
CryptoBilis has also stopped selling devices, Ledger added, and advised customers who bought from CryptoBilis to not set up their devices and contact the Ledger support team.
Criminals have been targeting hardware wallets this year. Hackers in July were able to steal close to $120 million in bitcoin from Coldcard users due to a firmware bug in the devices.
Canadian company Coinkite, which makes the popular products, said that the bug led to faulty seed generation, allowing hackers to guess investor seedphrases.
In a separate incident, hardware wallet manufacturer Trezor last month reported that close to 81,000 customers had their details leaked after its third-party fulfillment partner had data stolen.
Scammers earlier this year were able to get hold of customer information via crypto wallet Ledger’s payment processor Global-e to send phishing emails.
