Hardware wallet provider Ledger has announced that it is pushing back the launch of its key- recovery feature after mounting criticism from the larger cryptocurrency community.ย
The hardware wallet provider likewise indicatedย that it would open the source code before it releases the update.ย
Key- Recovery Service Delayedย
The decision was conveyed to wallet users in a letter by Ledger CEO Pascal Gauthier. In the letter, Gauthier indicatedย that the company would only launch the new feature after releasing its code to the community. Furthermore, Ledger likewise scheduled a Twitter Spaces session to discuss theย challenge with the community and reach a consensus on the way forward. The Twitter Spaces session was joined by over 13,000 users, with the CEO calling it a humbling experience and a lesson in communication. Gauthier stated,ย
โThis experience has been very humbling. We miscommunicated on the launch of this product; it was not our intention to take people by surprise. So asย aย resultย of that, we understand the communityโs direction and apologize for the miscommunication.โ
Codebase To Be Open-Source
Gauthier likewise indicatedย that as a response to concerns raised by the community, Ledger would be accelerating intendsย to open-source its codebase, beginningย with the core components of its operating system and Ledger Recover. Inย addition, Ledger Recover wonโt be be released until this is completed.ย
โWe have made the decision to accelerate the open-sourcing roadmap! We will include as much of the Ledger operating system as possible, beginningย with core components of the OS, and Ledger Recover, which willย not released until this work is complete. Furthermore, we will open-source the Ledger Recover protocol, enabling the community to have as much choice as possible over your self-custody, in addition to the service being fully optional. This roadmap will be shared and updated by our CTO and engineering team.โ
The Chief Technology Officer at Ledger, Charles Guillemet, revealed that over theย following few days, the company would causeย a white paper on the Recover Protocol public, along with technical blog posts. These would explain the principles governing Recover and give a detailed justification of how theย procedure works. Guillemet stated,ย
โItโs going to be very easy and clear for every single cryptography and security expert to have a look at the protocol to get more guarantees and understand how it works.โ
He likewise alsoย mentionedย that developers could build their own backup provider for the seed phrase shards rather than using the ones provided by Ledger.ย
โThis has always been something important for Ledger, but this recent event showed how important it is for the community, and thisย isย why we decided to prioritize this open-sourcing process.โ
Gauthier likewise stressed that offering key recovery services is importantย to onboarding new users for whom self-custody couldย be difficult.ย
โThe bulkย of users in cryptocurrency today either doย not own their private keys and/or are putting their private keys at danger using less secure forms of self-custody and hard-to-use forms of storing and securing their seed phrase.โ
Ledgerโs PR Nightmareย
Ledger announced its Ledger Recover service pastย week, allowing users to store encrypted backups of their seed phrases with thirdย party custodians. This would enable Ledger users to restore their private keys even if they lost their seed phrases. The feature was announced as an opt-in feature and would mustย haveย a KYC (Know Your Customer) verification. Nonetheless, if Ledger was expecting a supportive reaction, it got quite the opposite.ย
Other community members likewise notedย that the code for Ledgerโs Recover feature is not open-source, meaning thereย is no way to audit and test the featureโs safety. Inย contrastย toย its competitors, Ledger does not publish all its code. Instead, its products are tested by a team of select security researchers.ย