Trezor moves to cut resellers after Ledger theft
Oct 15, 2026Thursday, October 15, 2026Summary from 3 contributing podcasts.
- Trezor says it will end authorized reseller relationships on Jan. 1, 2027, after tampered Ledger wallets were drained.
- Reports put losses between $83 million and $93 million; Ledger has not verified the latest $86 million estimate.
- The changes target distribution risk, but cannot by themselves prove devices stayed untouched.
The response to the Ledger wallet theft is reaching beyond Ledger. In his Oct. 14 episode, David Bennett reported that Trezor plans to end reseller authorizations on Jan. 1, 2027, and is reviewing its vendors. That would remove a layer between manufacturer and buyer - but it cannot guarantee a device has not been tampered with before it arrives.
The theft itself occurred on October 9, according to Ungovernable Misfits. The show said tampered Ledger devices sold through Malaysian reseller Crypto Billis contained a cellular modem and microcontroller wired to the display. During setup, the implant could read the 24-word recovery phrase - the words used to restore a wallet - and transmit it to attackers. The show reported that hundreds of devices were affected.
The reported loss total remains unsettled. Rabbit Hole Recap put it at $83 million; Ungovernable Misfits reported $93 million across six blockchains. Bennett’s Oct. 14 episode cited an $86 million estimate from on-chain investigator Spectre, which it said Ledger had not verified. These are differing estimates, not evidence that the loss grew or shrank; the reports do not reconcile their scope. Ledger said it had no evidence its own systems or direct sales were compromised.
The companies’ responses point to the weak link these reports describe: trust in the route from factory to buyer. Ledger asked resellers in seven Asian markets to pull devices while it investigated, Bennett reported. Trezor said it had found no evidence its own devices were compromised. Neither account establishes how many devices may have been exposed or whether the same kind of tampering affects other products.
That uncertainty leaves buyers weighing different risks rather than a simple choice between safe and unsafe. Bennett argues that lost confidence in self-custody can push people toward exchanges or ETFs. Ungovernable Misfits’ Q and A advocates splitting keys across devices from different manufacturers, while co-host Max warns that complicated arrangements also create room for user mistakes. Cutting reseller channels may reduce one exposure; the reports do not show that any single custody setup removes them all.
Source Intelligence
- Deep dive into what was said in the episodes
Bank of Money Laundering | Bitcoin News • Oct 14
- Ledger asked resellers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to pull its wallets while it investigates implants that steal recovery phrases. Ledger says confirmed losses involved CryptoBillis, a Southeast Asian reseller; it has no evidence its own systems or direct sales were compromised.
- Trezor said it found no evidence of compromised devices and is reviewing its vendors after the Ledger incidents. David Bennett supports buying wallets directly from manufacturers and views reseller exits as a step that could deepen distrust of self-custody.
- David Bennett said the Ledger scare followed a separate CoinKite security failure and recommended Unchained for people seeking a custody alternative, citing its multisignature service. He argued that exchange and ETF providers could benefit when wallet users lose confidence in self-custody.
Also discussed on this episode: (11)
Inflation (2)
- September inflation exceeded forecasts, and Stephen Alfer's CoinDesk report said markets began pricing a possible October Fed hike after earlier expectations favored a pause. David Bennett attributed Bitcoin's decline to the inflation report and rising Treasury yields.
- The inflation news lifted Treasury yields and weighed on stocks, metals, and Bitcoin; oil rose while natural gas and most agricultural commodities fell. The episode placed Bitcoin at $81,740 and described a sharp decline in silver and broad losses across major equity indexes.
BTC Markets (2)
- David Bennett reported Bitcoin's market capitalization, supply, network backlog, and hash rate alongside the price. He said hash rate had moved above one zettahash per second, which he took as evidence against a mining death spiral.
- K33 argued Strategy's preferred-stock financing carried dividend costs that could have funded more Bitcoin purchases, while David Bennett said the analysis lacked insight into Strategy's internal considerations. Bennett's own view was that investors should buy Bitcoin directly rather than Strategy shares or preferred stock.
V4V (1)
- David Bennett argued that value-for-value podcasting is held back by user friction, not by the model itself: listeners often will not act even when apps make payment easy. He expects value-for-value and advertising to coexist, and said podcast apps still lack useful alerts for boosts to older episodes.
Custody (1)
- David Bennett disclosed that BitBox sponsors the show and that he uses its wallet, distinguishing that paid endorsement from Circle P businesses he promotes without having tried every product. He said listeners should research the wallet themselves.
Adoption (3)
- David Bennett promoted Bitcoin Beans' Colombian cacao and described cacao as nutrient-dense; he also said ancient Mesoamerican communities used fermented cacao beans as currency. The product is sold as pure cacao for Bitcoin, with a discount code.
- Vagabond's Colorado merchant guide lists more than 300 businesses that accept Bitcoin, but visits showed adoption remains uneven. Moonflower Coffee enabled payment through Square, while Butcher Block Cafe accepts Bitcoin only at its Washington Street location; Vagabond said another location does not yet accept it.
- Vagabond said Fifth House Coffee's owner refused Bitcoin despite the business appearing on a Bitcoin merchant map and using a Square terminal. David Bennett endorsed walking away from merchants who dismiss potential Bitcoin customers, arguing that consumers should take their business elsewhere.
Banking (2)
- The U.S. Treasury fined Bank of America over alleged anti-money-laundering and sanctions failures, including risks tied to China and the southwest border. David Bennett contrasted the bank's financial penalty with criminal cases against Tornado Cash developers and argued the fine would not change the bank's incentives.
- BNY and Citadel Securities completed a Treasury repo workflow using a tokenized Treasury note, recording the asset on BNY's private ledger and settling it within minutes. The note then served as collateral for an overnight repo, illustrating how tokenized securities could speed institutional settlement and financing.
Ledger's $86 Million Wallet Scare | Bitcoin News • Oct 12
- Hardware wallet maker Ledger confirmed an unauthorized physical implant in devices distributed by Southeast Asian reseller CryptoBillis. David Bennett emphasizes that the supply chain attack compromised physical devices rather than Ledger's core software or random number generators.
- Security incidents have ignited industry debates over whether exchange-traded funds offer safer custody than hardware wallets. Plan B defended converting holdings to ETFs in 2025, while Jameson Lopp warned that rushing assets into centralized vehicles creates single points of failure.
Also discussed on this episode: (5)
Stablecoins (1)
- The Financial Stability Board warned that uncoordinated national regulations expose severe vulnerabilities in global stablecoins during potential liquidity runs. Bank of England Governor Andrew Bailey urged international financial authorities to establish cross-border information sharing protocols before market distress hits.
Regulation (1)
- The Commodity Futures Trading Commission proposed defining event contracts tied to sports and politics as swaps under its exclusive jurisdiction. Chairman Michael Selig asserted authority over platforms like Kalshi and Polymarket, while explicitly excluding traditional casino gambling from swap rules.
Banking (1)
- Jeonbuk Bank launched South Korea's first traditional bank loans backed by Bitcoin collateral for corporate clients. Local civil enforcement rules updated on October 1 enabled legal frameworks for seizing digital asset collateral, though third-party custodians will hold the underlying keys.
Startups (1)
- Bermuda-based insurer Meanwhile secured $37.5 million in funding from investors including Bain Capital Crypto and Sam Altman. CEO Zach Townsend reported strong international demand for Bitcoin-denominated whole life policies, which allow policyholders to borrow up to 90 percent against accumulated equity.
Agents (1)
- An AI agent operated by Varia Labs uncovered a 2015 integer overflow flaw in the XRP Ledger that could have minted 18 trillion XRP. Ripple bypassed standard validator voting to ship a closed-source binary fix, drawing criticism from CyberCapital founder Justin Bonds.
$93M Drained From Tampered Ledger Devices | THE BITCOIN BRIEF 94 • Oct 12
- A supply chain attack compromised hundreds of Ledger Nano X devices, draining an estimated $93 million across six blockchains on October 9. Victims bought devices from Malaysian reseller Crypto Billis, whose modified units bypassed Ledger genuine checks.
- Tibane Labs CEO Mark Carpelles analyzed a tampered Ledger device, revealing a cellular modem, eSIM, microcontroller, and custom antenna concealed inside. The board intercepted seed phrases directly from screen data lines and transmitted them over cellular networks.
- Q&A argues multi-vendor multi-sig custody is the only mechanism capable of surviving supply chain hardware compromises. Max cautions against putting total net worth into single asset classes or rigid setups, advocating for broader asset and device diversification.
Also discussed on this episode: (7)
Safety (1)
- Coldcard official social media and founder NVK Telegram accounts suffered security compromises, broadcasting links to a fake seed migration page. Coldcard reported credentials and offline two-factor authentication remained secure while requesting account support escalation.
Regulation (1)
- FinCEN formally withdrew proposed self-custody transaction monitoring rules requiring $10,000 threshold identity collection and dropped designations labeling international coin mixing as primary money laundering concerns. The withdrawal leaves existing sanctions and criminal prosecutions unchanged.
Privacy (2)
- Federal prosecutors are citing an appeals court ruling against Bitcoin Fog founder Roman Sterlingov to fight Tornado Cash developer Roman Storm's acquittal motion. The ruling accepted venue jurisdiction based on an undercover agent mixing $250 in Bitcoin.
- Am I Exposed released version 0.42.1 featuring pre-broadcast PSBT privacy analysis. BlueWallet added reproducible build verification and BIP-329 label importing, while CoinOS launched public testing for version 3 with Arc and Nostr integrations.
Lightning (1)
- Second patched a flaw in its Arc server implementation after an attacker stole 0.75 Bitcoin of company funds on October 5. The server failed to verify script ownership, allowing malicious key insertion to sweep funds via Lightning.
Nation-State (1)
- Mempool.space operator Wiz submitted a $227,000 community ICANN application for the dot-bitcoin top-level domain from El Salvador. The registry requires proof of infrastructure contributions and pledges 21% of gross revenue to Bitcoin open source development.
Custody (1)
- Foundation is preparing KeyOS version 1.4.1 for public release alongside internal testing of Passport Core version 2.4. The Core release introduces native MiniScript support to Passport hardware devices.
$86M Drained From Ledgers & Can AI Break Bitcoin's Crypto? | Rabbit Hole Recap • Oct 9
- Attackers drained over $83 million across Bitcoin, Ether, and Tron from Ledger hardware wallets sold by reseller CryptoBillis. Mark Karpeles noted attackers likely desoldered hardware eSIMs to transmit private keys to malicious actors.
Also discussed on this episode: (12)
BTC Markets (1)
- Bitcoin traded at $82,720 with a market cap of $1.66 trillion as block height reached 970,657. Mempool fees remained low at 3 sats per vByte despite elevated chain activity.
Protocol (3)
- Justin Drake warned that frontier AI could break elliptic curve cryptography without quantum computers, advising against address reuse. Coinbase cryptographer Yehuda Lindell dismissed the claims as speculative FUD lacking technical evidence.
- Cryptographers Jonas Nick and Mikhail Kudinov previously acknowledged ECDSA will eventually face cryptographic decay. Bitcoin researchers are proactively developing post-quantum signature schemes to replace legacy public key pairs.
- Bitcoin Red Team initiative Project Lupe identified five Core vulnerabilities using frontier AI scanning tools. Developers including Hodlnator and Sebastian patched RPC port binding flaws, data races, and silent payment issues.
Safety (1)
- A financially motivated hacker used open-source AI tools and Claude session histories to breach nine South Korean banks. The attack exposed personal financial data for over 68,000 customers, including 25,000 at Shinhan Bank.
Regulation (2)
- SEC Commissioner Hester Peirce urged policymakers to overhaul corporate KYC warehousing and the Bank Secrecy Act. Centralized identity databases mandated by financial surveillance laws create persistent target honeypots for automated AI exploitation.
- Candidate Bruce Blakeman pledged to dismantle New York state's BitLicense and end energy moratoriums. Conversely, Manhattan District Attorney Alvin Bragg and state lawmakers proposed attaching criminal liability to BitLicense compliance violations.
Energy (1)
- Dark Horse partnered with Hopkinsville Electric to fund a 65-megawatt substation within the Tennessee Valley Authority system. Dark Horse will utilize 50 megawatts while allocating 15 megawatts to stabilize local residential grid capacity.
Mining (1)
- Major mining operators are actively shifting infrastructure capacity toward higher-margin AI high-performance computing. Marty Bent anticipates this transition will flood the secondary market with cheap ASICs over the next twelve months.
Nation-State (1)
- The US government transferred roughly $1 billion in Bitcoin connected to the historic Bitfinex hack. Separately, Treasury Secretary Scott Bessent announced plans to seize $1 billion in Iran-linked crypto assets.
Adoption (1)
- Block initiated a nationwide mainstream advertising campaign across movie theaters and major sports broadcasts. The campaign aims to make Bitcoin accessible to general consumers while highlighting persistent fiat currency devaluation.
Coding (1)
- Community developers are leveraging frontier AI models to rapidly build custom video game mods and recreate complex software suites. These user-driven vibe coding tools directly threaten existing SaaS and gaming business models.