Skip to content

Project

Ledger Donjon

Ledger's in-house security research team, which probes hardware wallets and secure chips for vulnerabilities and discloses findings.

Known aliases

  • Donjon
  • DonjonLedger
  • Ledger Donjon

Current stories

investConfirmed8 publishers

Ledger finds a cellular implant inside a CryptoBilis-sold signer that copies recovery phrases at setup

Ledger disclosed on October 13 that an implant in a signer sold by CryptoBilis captures 24-word recovery phrases and sends them over LTE. Every fund loss Ledger has verified involved devices bought through that reseller.

Perspective Coverage

8 publishers
Builder
Builder 23%
Operator
Operator 48%
Investor
Investor 29%

Reality

Evidence60
Adoption
Not scored
Hype gap+30
Incentives45
Confidence70
scienceOne report1 publisher

Solana Mobile picks Ledger as its first hardware partner for the Seeker app

Ledger will ship its Atom with Solana Mobile's Seeker app preinstalled, delivery estimated for the second quarter of 2027. The announcement came five days after Ledger confirmed a hardware implant in an affected user's device.

Publishers:cryptotimes.io

Reality

Evidence40
Adoption30
Hype gap+25
Incentives65
Confidence55
investOne report1 publisher

Ledger bars resale of returned wallets after implants sent recovery phrases over cellular links

Ledger suspended reseller sales in seven Asian markets and barred resale of returned wallets after implants captured recovery phrases. Independent blockchain investigators estimate losses above $86 million, a figure Ledger has not verified.

Publishers:crypto.news

Reality

Evidence35
Adoption
Not scored
Hype gap
Not scored
Incentives60
Confidence45
investConfirmed6 publishers

MediaMarktSaturn pulled the full Ledger range within four days of losses surfacing at another reseller

MediaMarktSaturn removed all Ledger products from its stores and online platforms over tampering reports. The public German evidence is an X user's claim that two wallets held cellular modules. Ledger did not answer Cointelegraph on whether it has confirmed any tampered device in Europe.

Perspective Coverage

6 publishers
Builder
Builder 23%
Operator
Operator 42%
Investor
Investor 35%

Reality

Evidence50
Adoption
Not scored
Hype gap+25
Incentives
Not scored
Confidence60
scienceConfirmed6 publishers

Ledger asks resellers in seven Asian markets to pull its wallets while it traces the tampering

Ledger asked resellers in seven Asian markets to pull its wallets from shelves on October 14. It has not tied a suspected implant in a Flex from a second reseller to the first cases, so how far the tampering reaches is open.

Perspective Coverage

7 publishers
Builder
Builder 16%
Operator
Operator 51%
Investor
Investor 33%

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives50
Confidence62
investConfirmed7 publishers

Trezor will end some reseller authorizations on January 1, 2027 to focus on partners it can vet closely

Trezor will end its resellers' authorization on January 1, 2027, days after Ledger found an LTE spy implant in wallets sold by CryptoBilis. Trezor says there is no evidence its own devices were compromised.

Perspective Coverage

7 publishers
Builder
Builder 24%
Operator
Operator 47%
Investor
Investor 29%

Reality

Evidence58
Adoption
Not scored
Hype gap+12
Incentives60
Confidence66
investOne report1 publisher

Ledger's lab took about 125 days to walk a laser flaw in Trezor's chip into public view

Both wallet makers say AI is shortening the distance between finding a bug and using one, which makes the pace of their own coordinated disclosure the number worth pricing, and the only loss they cite belongs to a rival vendor.

Reality

Evidence34
Adoption22
Hype gap+33
Incentives82
Confidence33
securityOne report1 publisher

A machine found the bug and set the clock: Ledger disputes TestMachine's timeline

Ledger's CTO says the Ethereum clear-signing fix shipped two weeks before disclosure. The public release record cannot confirm that, and an autonomous scanner chose the publication date.

Reality

Evidence38
Adoption
Not scored
Hype gap+24
Incentives72
Confidence36