Wallet dossier

Ledger

hardwareactive

Self-custody hardware signer ecosystem with multiple Nano and touchscreen device generations plus the Ledger Wallet companion application.

Developer / company
Ledger SAS
Origin
France
Launch
2014
Custody
self_custody
Confidence
high
Last verified
2026-08-14

Product family

Products

Chronology

Lifecycle timeline

2016
product_released

Ledger Nano S launched

Product: Ledger Nano S

Ledger launched the Nano S hardware signer in 2016.

Evidence: 1
2018-07-09
product_released

Ledger Live launched as Ledger companion application

Product: Ledger Wallet

Ledger launched Ledger Live as a new all-in-one companion application for Ledger devices on Windows, Mac, and Linux. The same product lineage was later renamed Ledger Wallet in 2025.

Evidence: 1
2020-07-14
customer_data_breachhigh

E-commerce and marketing database breach discovered

Ledger discovered unauthorized access to its e-commerce and marketing database through a third-party API key; later publication of the stolen database exposed a much larger set of customer records.

Scope: customer_dataFunds affected: noAction: monitorEvidence: 2
2022-04-05
product_released

Ledger Nano S Plus became generally available

Product: Ledger Nano S Plus

Ledger made the Nano S Plus generally available.

Evidence: 1
2022-06-22
sales_discontinued

Ledger announced Nano S retirement from production

Product: Ledger Nano S

Ledger announced retirement of Nano S production and replacement by Nano S Plus while stating existing Nano S support and maintenance would continue.

Evidence: 1
2023-12-14
supply_chain_compromisecritical

Malicious Ledger Connect Kit versions published through compromised NPM account

A former employee phishing compromise enabled malicious Ledger Connect Kit packages to be published to NPM and dynamically loaded by some dApps, causing a small number of users to sign draining transactions.

Scope: supply_chainFunds affected: yesAction: monitorEvidence: 1
2024-05-28
product_released

Ledger Stax shipping began

Product: Ledger Stax

Ledger began shipping Ledger Stax to pre-order customers.

Evidence: 1
2025-10
rebranded

Ledger Live renamed Ledger Wallet

Product: Ledger Wallet

Ledger transitioned the companion application branding from Ledger Live to Ledger Wallet.

Evidence: 1
2025-10-23
product_released

Ledger Nano Gen5 launched

Product: Ledger Nano Gen5

Ledger launched Nano Gen5 at Ledger Op3n 2025.

Evidence: 1
2026-08-27
vulnerability_disclosed

Ledger disclosed command-interleaving signing vulnerability class

Ledger disclosed that applications built with affected Ledger Secure SDK releases could accept a new APDU command while an earlier command was awaiting on-screen user review, allowing signing parameters held in application state to be changed after display but before signature generation when an application did not independently validate its state machine.

Scope: transaction_signingFunds affected: unknownAction: updateEvidence: 1
2026-08-27
vulnerability_disclosedhigh

Ledger disclosed Ethereum clear-signing array-count truncation vulnerability

Ledger disclosed an Ethereum app Generic Transaction Parser flaw in which an attacker-controlled 16-bit array element count was stored in an 8-bit countdown field. For a 257-element array, the device could review only one operation while its signature still authorized the complete transaction.

Scope: transaction_signingFunds affected: unknownAction: updateEvidence: 1
2026-08-27
vulnerability_disclosed

Ledger disclosed Ethereum swap token-approval substitution vulnerability

Ledger disclosed an Ethereum app flaw in the token-payment path used by the Exchange application during swaps: the path checked the expected address and quantity but not the requested operation type, so a token approval carrying the expected values could pass validation and be signed without being displayed as an approval.

Scope: transaction_signingFunds affected: unknownAction: updateEvidence: 1

Sources

Evidence