ledger

🚨 $LEDGER ELEVATES SECURITY LEADERSHIP WITH OD... 🦈

📊 Ledger’s new dual‑role CIO/CSO consolidates network, product and enterprise risk under one veteran, tightening the institutional guardrail. 🔍 Oded Blatman’s Fireblocks pedigree signals a deeper alignment with custodial‑grade safeguards, a move that could tighten liquidity inflows from risk‑averse funds. 📈 The unified command reduces internal friction, potentially sharpening Ledger’s product roadmap and reinforcing its moat against supply‑chain attacks.

💬 How will this structural upgrade reshape the hardware‑wallet premium for institutional portfolios? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #LEDGER #Security #CIO #HardwareWallet #Crypto

🔥 💎

🚀 $LEDGER UNVEILS NEW SECURITY COMMANDER 🦈

📊 Ledger’s latest exec shake‑up slots Oded Blatman—ex‑Fireblocks—at the helm of both CIO and CSO duties, merging tech and security under one roof. This consolidation signals a tighter shield around network, product, and workplace layers, tightening the moat against evolving threats. 🛡️ Smart‑money eyes suggest the move could boost institutional confidence, potentially smoothing the path for larger custodial inflows.

💬 Will this dual‑role upgrade catalyze a fresh wave of enterprise adoption for hardware wallets? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #LEDGER #SecurityUpgrade #CryptoInfrastructure #HardwareWallet #Crypto

🔥 🦈

CTO Ledger calls for accountability from AI flaw hunters, warns of 'attention farming'

- Ledger and Trezor say researchers have a responsibility to disclose their findings if the vendor does not address the issue within the agreed disclosure timeframe.
- Ledger CTO stresses the importance of reporting vulnerabilities responsibly, avoiding 'attention farming' behavior that misleads the community.
- The article highlights the responsibility of cybersecurity researchers in the crypto space, especially when it involves AI and hardware wallets.

#BinanceSquare #CryptoNews #Ledger #Trezor #AI Security

$btc $eth

vlikevn Titanbot

Source: CoinTelegraph

In recent weeks, the markets have seen a mild correction, trading around the $BTC 89.100 dollar level and falling back to $ETH 2.925 dollars. Meanwhile, the Ledger firm, with support from Goldman Sachs and Barclays, is preparing a massive $4 billion initial public offering. According to a PwC report, institutional crypto adoption has now surpassed a point of no return. These developments indicate that the sector’s integration with traditional finance is accelerating. #Bitcoin #Ledger #Crypto

⚖️ Ledger faces a $500M class-action lawsuit in the U.S.
The company is accused of minimizing the December 2023 exploit in its Connect Kit library, jeopardizing critical data and attack vectors targeting users. In Web3, security isn’t assumed—it’s audited.
👉 Audit your wallet today: Review active permissions in tools like Revoke.cash, revoke unlimited contract approvals (unlimited allowances), and implement Multisig addresses to isolate exposed signers.
#Ledger #CryptoSecurity #Web3 #BinanceSquare
$BTC
$BNB
$SOL

Ledger faces $500M lawsuit over alleged data breach and crypto theft

#Ledger faces a proposed class-action lawsuit seeking at least $500M over claims that security and disclosure failures related to a December 2023 incident exposed customers to crypto theft and other financial losses. Plaintiff Douglas Kim claims scammers used compromised customer data to pose as Ledger representatives and steal nearly $1.95M in crypto.

The complaint alleges that attackers gained access to a former Ledger employee’s NPMJS account through phishing after the company failed to revoke their access. The attackers then uploaded a malicious version of Ledger Connect Kit designed to trick users into approving transactions that redirected funds to attacker-controlled wallets, a vulnerability Ledger later acknowledged.

👉 crypto.news/ledger-sued-for-500m-over-alleged-data-breach-and-crypto-theft/

🚨 Ledger is being sued!
At least $500 million in claimed damages—nearly $2 million in crypto assets stolen. Whose fault is it?

Group: 点击进入玖玖的粉丝群

On August 27, a user filed a lawsuit in the U.S. District Court for the Southern District of New York, representing a proposed national class action. The lawsuit alleges that Ledger had issues with data protection, security measures, and incident disclosures. More importantly, the plaintiff claims that they ultimately lost nearly $1.95 million in crypto assets.

The damages currently sought in this case are at least $500 million, and could even increase further. But what truly matters isn’t the “$500 million” figure—it’s a core problem that Ledger users have long faced: if an attacker has your personal information, do they really need to crack a hardware wallet? 😨

One of the key points of dispute in this case involves the Ledger Connect Kit security incident that occurred in December 2023. At the time, a former Ledger employee’s NPMJS account was compromised, and the attacker used the stolen access to publish a malicious version of the Connect Kit. When users used some related apps, they could be tricked into signing malicious transactions, ultimately resulting in funds being transferred.

Ledger at the time acknowledged issues with access revocation and said that the hardware wallet itself was not directly breached. But this lawsuit makes more serious allegations:
The attacker may not only have gained a technical attack opportunity, but also used previously leaked customer information to conduct highly targeted scams. Plaintiff Kim claims that in February 2025, he received a phone call from someone posing as a Ledger and Coincover employee. The caller guided him to a fake website, citing account risk.

Then, he followed the instructions to operate his device.
Two days later, he realized his crypto assets had already been transferred out, with losses of about $1.948 million.
This highlights a very real problem in the hardware wallet space:
hardware wallets may not be “cracked,” but users themselves can be “tricked open.”
If attackers know your name, email, phone number, or even know that you truly are a user of a particular wallet brand, the success rate of precise phishing can increase dramatically.

Click the avatar to join the Jiujiu chat group for daily strategies 🚀
#Ledger #加密货币 #硬件钱包

OneKey reproduced a transaction replacement attack on an old Ledger app version. Ledger patched the issue in their latest Ethereum app update and no funds were lost.

#Ledger #Security ‎

OneKey just publicly reproduced a Ledger exploit, start to finish

- the claim: Ledger's Ethereum app (v1.22.1) could sign a transaction different from the one shown on screen
- you approve transaction A
- the device actually signs transaction B, the one you never saw
- reproduced end to end, no theory

Ledger patched it in 1.22.3, update or stay exposed

can't verify this myself, but a rival naming an exact version number in public is not nothing.

Drop your Ledger firmware version below — let's see how many of you already updated.

already checked mine)
#oneKey #Ledger #exploit
$ETH

OneKey recreates a transaction-substitution attack on the old Ledger Ethereum app

- OneKey reported that it successfully recreated a public exploit attack against an older version of the Ledger app in their lab environment.
- This vulnerability has been fixed by Ledger in the Ethereum app version 1.22.2.
- No user funds were lost during the recreation process.
- The RSS source has not provided any further details about the attack method or the scope of impact.

#BinanceSquare #CryptoNews #Ledger #Ethereum #Security

$eth

vlikevn Titanbot

Source: CoinTelegraph

🚨 OneKey Security Team has reproduced a Ledger vulnerability: users who are attacked may experience a situation where “approved content does not match the actual executed transactions.” Please carefully verify the transaction details before signing, and stay vigilant.

#Ledger #ETH #OneKey

Optimized for Twitter copy:

🚨 Ledger disclosure of vulnerability details: Parameters shown on the device screen may not match the final signing parameters.
Recommendation: Update the Ledger Secure SDK, and carefully verify the transaction details before signing.
#Ledger #LSB023 #LedgerSecureSDK

A Fake Ledger App Sneaks Into the Apple App Store, Raking in $9.5 Million in a Week

The most outrageous security incident this week: a fake wallet app impersonating Ledger reportedly passed App Store review and stole about $9.5 million from more than 50 users within a week.

“Only download from the official store” isn’t enough anymore. Three ways to save yourself:

Before downloading, verify the developer: the official is Ledger SAS. If they ask for your seed phrase, it’s 100% a fake app. Never use a real wallet that you’ve installed—delete it immediately and move your assets to a new address.

Do you still believe “App Store downloads = safety”? Discuss in the comments.

#钱包安全 #Ledger #加密货币安全

🔒 Ledger: Updating Bitcoin Wallet Security Essential to Counter AI Developments

Charles Guillemette, CTO at Ledger, stated that the recent Coldcard exploitation incident highlights the growing importance of device-supported hardware random number generators in securing Bitcoin wallets. Guillemette affirmed that AI is reshaping the wallet security landscape, requiring ongoing updates to security protocols.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ SECURITY

#Ledger #Coldcard #Bitcoin #Security #AI

📰 Source: decrypt.co

🚨 Ledger Phishing Campaign Steals Over $3M

A phishing campaign targeting Ledger users has reportedly stolen more than $3 million, with an on-chain investigator linking the activity to the same attacker.

⚠️ Crypto users should stay alert and avoid suspicious links, messages, and requests for wallet or recovery information.

🔐 Never share your recovery phrase or private keys, even if a message appears to come from a trusted source.

#Ledger #CryptoSecurity #Bitcoin #CryptoNews

Ledger Users Targeted in $3M+ Phishing Attack

A phishing campaign targeting Ledger users has reportedly stolen over $3 million. On-chain investigators say the same attacker may be behind the activity.
$BMT
$TST

Stay alert: never share your seed phrase or enter it on links sent through DMs, emails, or suspicious websites.

Your seed phrase = your funds. Keep it offline.

#crypto #Ledger #Bitcoin #CryptoSecurity #BinanceSquare

⚠️USER #LEDGER LOSES $1 MILLION IN A PHISHING SCAM

A Ledger user got wrecked for $1 million after receiving a fake letter impersonating Ledger's tech support.

The letter sent the victim to a phishing site, where they entered their seed phrase, allowing the attackers to drain their wallet.
$BTC
$SOL
$USDC

I thought about this external wallets (“Wallets”) story all morning. And here’s how I translated it in my novice head.

Keep on Binance: It’s like putting your jewelry in the safe of a big luxury hotel. It’s super secure, they handle everything for you, and if you lose the code, the hotel manager can help you. But technically, the safe doesn’t belong to you.

The physical wallet (Ledger/Trezor): It’s the hidden safe under your bed. You’re the only one in charge. But beware: if you lose the key, NOBODY will be able to help you. The money is gone forever.

Since I’ve got the memory of a goldfish and only a few euros in $BNB, I’m staying at the hotel for now! 😂
Do you validate this comparison? 👇

#EducationCrypto #BinanceSquare #Ledger #CryptoSecurite

Famous on-chain researcher ZachXBT criticized hardware wallets

According to him, they are not suitable for storing large amounts due to vulnerabilities, poor usability, and regular app-update crashes

Ledger was named the worst option because Ledger Live software updates often break basic functions

For security, he recommended using a separate iPhone used exclusively to manage cryptocurrency

#HardwareWallet #ZachXBT #Ledger

Ledger cold wallet hack sparks heated discussion in the community. As one of the world’s largest hardware wallet manufacturers, Ledger has long positioned "offline private keys, never connected to the internet" as its core selling point. The breach of the cold end in this incident has undoubtedly shaken some users’ confidence.

From a technical perspective, the publicly available information is currently incomplete, and the following points should be closely watched:
1️⃣ Whether the attack involved tampering at the supply-chain level, or whether the compromise occurred through phishing in the user interaction stage
2️⃣ The scope of impact and the magnitude of financial losses
3️⃣ Ledger’s official traceability report and compensation plan

A cold wallet ≠ absolute security; hardware is only one part of risk reduction. Habits such as physically isolating the recovery phrase, verifying firmware, and performing a secondary confirmation of transactions are equally critical.

The security legend of hardware wallets is being reassessed.🔐

#硬件钱包 #加密安全 #Ledger