Trezor Cuts Reseller Network in Supply-Chain Security Push
Trezor is shrinking its reseller network and adding supply-chain checks after reports that a Ledger wallet sold via CryptoBilis contained spyware.
Ledger confirmed a tampered Nano X linked to about $93 million in reported thefts, so owners began weighing devices; a home scale can't prove a wallet is clean.
Hardware wallet owners have started pulling out kitchen scales after a tampering scandal connected to roughly $93 million in reported thefts. Yet the so-called weight test can reveal an added component without showing that a device is safe.
The weighing check gained ground once Ledger confirmed that a device sold through CryptoBilis, a reseller Ledger names for Southeast Asia, contained a concealed implant. Ledger says its own systems have not been compromised, but the affected unit is reported to have reached its buyer through that listed route.
Weighing a wallet is attractive because the device stays sealed. Makers publish official weight figures as a baseline.
Ledger gives the Nano X a mass of 34 grams, while Trezor says its Safe 3 weighs 14 grams. Buyers can then compare those numbers with their own scale reading.
In principle, an added circuit board, antenna and cellular modem should increase the mass, making a heavier wallet look suspect.
Mark Karpelès, former CEO of Mt. Gox, came across that kind of setup in a sealed Nano X he purchased in Malaysia. In his account, a covert chip captured the recovery phrase from the screen and transmitted it over a cellular connection.
The implant never had to match the stated weight exactly. In Karpelès' device, the board sat behind the display and a shorter battery opened up space, so the added mass stayed small.
Karpelès' own estimate puts the remaining gap at about one gram. He says that falls within normal factory variation, because batteries with the same capacity can still differ in weight.
The difference varies by ~1g, which might be just what your ledger weight may vary due to factory variables (batteries for example tend to not weight the same even for equal capacity).
â Mark Karpelès (@MagicalTux) October 11, 2026
With only one-gram resolution, a typical kitchen scale cannot tell a small implant apart from that factory gap. A high-precision micro scale is more useful, though it only works if calibrated against a known weight. The only direct check is to open the case and inspect the board.
Ledger's advice goes a step further. The firm has suspended reseller sales and advised recent CryptoBilis buyers not to set up their hardware wallets at all.
In the end, a kitchen scale only catches a crude implant, not a carefully hidden one. With hardware wallet attacks moving from software into the devices themselves, buying directly from the manufacturer may count for more than any at-home check.
Share to
Disclaimer: this article comes from third-party media and is provided for reference only. It does not constitute investment advice. Crypto and other financial products carry significant price volatility risk, so please make your own decisions carefully.
Trezor is shrinking its reseller network and adding supply-chain checks after reports that a Ledger wallet sold via CryptoBilis contained spyware.
MediaMarkt has paused Ledger wallet sales after reports of spyware in some devices and an $86 million drain.
Build Asset Management CIO Matt Dines says a rising dollar is bullish for Bitcoin as capital shifts to a U.S.-led Western Hemisphere system.
Ledger's October 13 update still names only CryptoBilis in its implant investigation, and users are questioning why European cases and losses are not addressed.