When your biggest competitor has a terrible week, the textbook move is to start running ads. Trezor says it is skipping that chapter.
The hardware wallet maker stated publicly that it does not capitalize on Ledger’s security incident and that it puts user security first. The timing matters, because the incident in question is one of the costliest hardware wallet scares in recent memory.
What happened with Ledger’s devices
The trouble was reported between October 9-11, 2026. It centered on Ledger hardware wallets that had been tampered with by CryptoBilis, a reseller operating in Southeast Asia.
The affected units contained unauthorized implants, meaning someone modified the hardware somewhere between the factory and the customer.
The damage was significant. An estimated $86 million to $103 million was drained from various wallets, mostly in USDT on the Tron blockchain.
Ledger confirmed that every verified incident traced back to devices sold through the suspect reseller. The company also said its own direct sales and internal systems were secure against this kind of vulnerability.
Trezor’s response: solidarity over sales
Trezor moved quickly to distance itself from any suggestion of opportunism. It said there had been no reports of compromised Trezor devices coming from CryptoBilis.
The company also emphasized its ongoing collaboration with industry partners on security and pushed back on any idea of competitive tension arising from the episode.
Both companies landed on the same core message for users: buy devices through official channels, and follow proper setup protocols to protect your funds.
Neither company is coming in with a spotless record
Trezor has its own reasons to avoid gloating. In late September 2026, it disclosed a data breach involving ShipMonk, a fulfillment partner.
That breach affected approximately 81,000 customers and exposed personal details. Trezor maintained that the integrity of its devices was not affected.
The two companies also share a long history of poking at each other’s hardware. Ledger’s in-house security research team, Donjon, has published findings flagging physical flaws in Trezor hardware, with reports in March 2025 and June 2026.
What this means for hardware wallet users and makers
The CryptoBilis incident and the ShipMonk breach hit different links in the supply chain, yet both landed outside the manufacturers’ own walls.
The deeper implications call for standardized anti-tamper practices and clearer rules for how hardware gets procured. Manufacturers may face higher operational costs from enhanced security protocols, which could squeeze margins or push prices up in a competitive market.
Publicly refusing to exploit a rival’s crisis positions Trezor as a responsible voice at a moment when trust is the product being sold. It also reflects a shared problem: if users start to doubt hardware wallets as a category, every manufacturer loses, regardless of whose name was on the tampered box.
Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.