A researcher raises privacy concerns about Ledger’s practices
A recent thread by a cryptocurrency researcher highlights questionable practices by Ledger, the leading crypto wallet. The researcher expresses concerns about privacy for Ledger Live users and specifically focuses on how Ledger Live manages user data and the limited offline options on Ledger hardware wallets.
Ledger Live actively monitors users and gathers data
According to the researcher’s findings, Ledger Live actively monitors users and collects data by performing a device check whenever a Ledger device connects. This means that Ledger is always aware of the device’s connection, making it impossible for users to disable remote tracking without disrupting functionality.
Users cannot operate hardware wallets anonymously
The researcher points out that Ledger’s code prevents users from operating hardware wallets anonymously. Every time the device is plugged in, Ledger knows it’s you and lists which apps are installed on your device, allowing them to track what you’re running on your hardware.
Concerns about firmware updates and security
The researcher advises users not to update their Ledger firmware due to concerns about the company’s ability to read the secure enclave and extract private keys. The embedding of device doxxing in simple code raises questions about what else Ledger might be doing. The researcher also highlights previous issues with Ledger Live software tracking a significant amount of user data.
Hot Take: Questions about privacy and security in the leading crypto wallet
The recent revelations about Ledger’s practices raise important questions about privacy and security for users of the popular crypto wallet. With active monitoring, data collection, and limitations on anonymous usage, users may have concerns about their personal information being tracked and shared. Additionally, the potential vulnerabilities in firmware updates and secure enclave access pose risks to the security of private keys. As Ledger faces these criticisms, it will be crucial for the company to address these concerns and provide transparent explanations and solutions to protect user privacy and security.
By
By
By
By
By
By