Read

A researcher revealed questionable practices by Ledger that raises important privacy concerns about the leading crypto wallet. 
In a <a href="https://twitter.com/rektbuildr/status/1739984215070888316" target="_blank" rel="noreferrer noopener">recent X thread</a> a cryptocurrency researcher unveiled practices by <a href="https://crypto.news/tag/ledger/">Ledger</a> that raise concerns about privacy for Ledger Live users. 
The researcher particularly raised concerns regarding how Ledger Live manages user data and the limited options for offline use on Ledger hardware wallets. 
According to @rektbuildr’s findings, Ledger Live actively monitors users and gathers data, performing a device check whenever a Ledger device connects. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Ledger Live embeds the genuine check into the apps listing procedure. As it is, they always doxx your device when installing or updating apps and firmware. I removed most tracking in Lecce Libre, but they still track you regardless. For the past couple days I'd been trying to… <a href="https://t.co/Q1aF1qpjge" target="_blank">pic.twitter.com/Q1aF1qpjge</a>— REKTBuildr 🔺🔺🔺 (@rektbuildr) <a href="https://twitter.com/rektbuildr/status/1739984215070888316?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 27, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
Ledger’s code, according to @rektbuildr, prevents users from operating the hardware wallets anonymously. 
The Paris-headquartered company is always aware of the device’s connection, making it impossible for users to disable remote tracking without disrupting functionality, the researcher adds. 
<blockquote class="wp-block-quote"> 
 “Which means Ledger knows it’s you every time you plug the device in. During that procedure it lists which apps are installed in your device, so they also know what you’re running on your HW [hardware].” 
 @rektbuildr 
</blockquote> 
 You might also like: <a href="https://crypto.news/ledger-ex-staff-phished-in-library-compromise/"> Ledger ex-staff phished in library compromise </a> 
The code sleuth urged users not to update their Ledger firmware and expressed skepticism about the necessity of the upgrade and highlighting concerns about the company’s ability to read the secure enclave and even extract private keys. 
<blockquote class="wp-block-quote"> 
 “If they’re embedding device doxxing in simple things like apps listing code, what else are they doing? We now know their secure enclave is readable. They have a recover function which extracts private keys from the secure chip.” 
 @rektbuildr 
</blockquote> 
This is not the first time @rektbuildr has exposed Ledger-related issues. 
In early December, he <a href="https://crypto.bi/forum/threads/ledger-live-data-collection-is-more-than-a-little-concerning.5/" target="_blank" rel="noreferrer noopener">revealed</a> that Ledger Live software tracks a big set of data including clicks, page visits, redirects, crypto transactions, page scrolls, account numbers, crypto asset names, and session durations. As of the time of writing, Ledger has not issued a public statement on the new revelations. 
In 2023, Ledger faced challenges as its customers reportedly suffered significant losses in Bitcoin (<a href="https://crypto.news/price/bitcoin/" target="_blank" rel="noreferrer noopener">BTC</a>) and Ethereum (<a href="https://crypto.news/price/ethereum/" target="_blank" rel="noreferrer noopener">ETH</a>) due to a <a href="https://crypto.news/ledger-wallet-holders-lose-800k-to-fake-app/" target="_blank" rel="noreferrer noopener">fraudulent version</a> of the app, which sneaked into Microsoft’s App Store. Additionally, the wallet manufacturer received criticism for its recovery service, which offered users a means to regain access without requiring their secret seed phrase. 
 Read more: <a href="https://crypto.news/ledger-to-launch-controversial-recovery-service/"> Ledger to launch controversial recovery service </a>

Crypto dashboard Ledger Live tracks user data, researcher says

crypto.news

Other articles published on Dec 28, 2023

Solana (SOL) Seeing Unimaginable Correction

2024: The year crypto will clean up its act and shatters its bad image

Bitcoin SV Registers Fresh 52-Week High of $97; Next Aim $100?

Just-In: Binance Launches Discounted USDC-Margined BTC, ETH, BNB, SOL & XRP Perpetual Contracts

Shiba Inu (SHIB) Whales Disappear

OpenAI and Microsoft on Trial – Is the Clash with The NYT a Turning Point for AI Ethics?

Join our free newsletter for daily crypto updates!