Ledger Live Software Allegedly Sends User Information to Ledger
A developer known as Rektbuilder has raised concerns about the information that Ledger, a hardware wallet manufacturer, collects through its wallet management software called Ledger Live. The developer discovered that the software incorporates checks for the device ID during the installation or update of apps and firmware.
Rektbuilder, who is currently developing a lighter and less intrusive app called “Lecce Libre” for managing Ledger hardware wallets, warned that removing the verification code breaks the app, so it is mandatory to use it. According to the developer’s findings, disabling remote tracking is impossible, suggesting that Ledger can identify users whenever they connect their device.
Previously, Rektbuilder had removed unnecessary network calls for asset balances within Ledger Live. The concern was further escalated due to the recovery function that allows retrieving private keys, raising questions about whether these keys may be read.
Calls for Ledger to Address the Concerns
Emin Gün Sirer, the CEO of Ava Labs, joined Rektbuilder in urging Ledger to address the issues raised. Sirer emphasized that Ledger should confirm or deny the allegations, provide an offline option without tracking, and clarify whether private keys are readable from the secure element.
Following the report, Ledger has contacted Rektbuilder to work together and obtain feedback on the raised concerns. This comes after Ledger recently experienced an attack resulting in the loss of $600,000 in user assets.
Hot Take: Concerns Mount Over Ledger’s Handling of User Information
A developer has brought attention to the potential tracking and identification capabilities of Ledger, a cryptocurrency hardware wallet company. Through its wallet management software, Ledger Live, the company allegedly collects user information, including device IDs. Removing the verification code that enables this tracking is not possible without breaking the app. Additionally, concerns have been raised about the security of private keys and the possibility that they may be read. Emin Gün Sirer, CEO of Ava Labs, has called on Ledger to address these concerns and clarify the offline options available. Ledger has engaged with the developer to address the issues raised. As users become increasingly conscious of privacy and security in the crypto space, transparency and accountability are crucial for hardware wallet providers.
By
By
By
By
By