Ledger Live Raises Concerns over User Data Collection
An investigation by Rekt Builder has brought attention to the data collection practices of Ledger Live, the official software for managing Ledger hardware wallets. According to the developer, Ledger Live tracks various user activities, including the installation of apps and the cryptocurrency holdings stored on the device.
Rekt Builder discovered that Ledger Live embeds a genuine check during its listing procedure. This check sends information about the device, such as its serial number, firmware version, and installed apps, to Ledger’s servers. The concerning aspect is that all this data is accessible to Ledger, potentially giving them detailed insights into their clients’ crypto assets.
Attempts to disable the remote tracking feature in Ledger Live were unsuccessful, as doing so resulted in software malfunctions. This suggests that Ledger intentionally designed the software to track user activity.
Privacy and Security Concerns Surrounding Ledger
This is not the first time Ledger has faced accusations of privacy violations. In 2022, they were accused of collecting data on users’ activities and later apologized for it. In 2023, a security researcher identified a vulnerability in Ledger’s Node Package Manager (NPM) account, leading to potential data breaches affecting thousands of users.
Hot Take: Protecting User Privacy Should Be a Priority for Crypto Companies
The recent findings regarding Ledger Live’s data collection practices raise concerns about user privacy within the crypto industry. It is essential for companies like Ledger to prioritize protecting user data and ensure transparency in their data collection policies. By tracking every move users make and accessing detailed records of their crypto holdings, companies risk exposing sensitive information that could be exploited by malicious actors. This not only jeopardizes user security but also undermines the trust users place in these hardware wallet providers. As the crypto space continues to grow, it is crucial for companies to uphold strong privacy standards and prioritize user protection.
By
By
By
By