Recent investigations by security researcher REKTBuilder have brought to light concerns regarding Ledger Live's data collection practices. Ledger Live, the official software for managing Ledger hardware wallets, is reportedly tracking user activities, including the installation of apps and cryptocurrency holdings. This scrutiny follows allegations that Ledger Live conducts "genuine device checks," transmitting detailed information about the user's device and installed applications to Ledger's servers.
REKTBuilder's analysis, which involved inspecting the software's Python code, revealed that each time a user connects their Ledger device, a check is performed listing every app installed. This process ostensibly allows Ledger to track which cryptocurrency networks a wallet owner uses. Further investigations uncovered a "listApps" subroutine embedded within the software, which not only logs installed apps but also records the time and date of each device connection.
Efforts to disable the tracking feature in Ledger Live proved futile, with any attempt to do so resulting in the software becoming unusable. This finding suggests that Ledger Live’s core functionality relies on this data collection, raising privacy concerns among users. Despite these issues, REKTBuilder continues to use Ledger Live, citing the lack of alternative hardware wallet options compatible with specific networks like Avalanche.
This isn't the first instance of privacy-related accusations against Ledger. In 2022, the company faced criticism for collecting data on users' activities and promised to improve its privacy practices. Additionally, a security flaw in Ledger's Node Package Manager account was identified in July 2023, potentially impacting over 270,000 accounts. As the crypto community becomes increasingly privacy-conscious, these revelations about Ledger's data practices have raised significant concerns.
Disclaimer: Please note that the information provided in this article is based on the referenced research articles. It is essential to conduct further research and analysis before making any investment decisions. The cryptocurrency market is highly volatile, and investors should exercise caution and consult with financial professionals before engaging in cryptocurrency trading or investment activities.