Ledger

"Randomness Is the Foundation" In this recent blog post, Ledger CTO, Charles Guillemet, compares the recent Coldcard incident to the Trust Wallet vulnerability in 2023, underlining the foundation of randomness in seed generation. Read more:

Ledger Enterprise is not affected by the recent Coldcard incident. According to Coinkite's own advisory, the issue traces back to firmware released in March 2021, affecting multiple Coldcard models through their recently fixed versions. Seeds generated on the affected firmware carry significantly reduced entropy. Fixed firmware is now available for every affected model, and Coinkite has published migration guidance for impacted users. We'd point readers to their advisory directly for the confirmed technical detail (link in comments). At Ledger Enterprise, Shared Owner seeds are generated by Personal Security Devices (PSDs) using the hardware True Random Number Generator within the Secure Element. The relevant production see generation path has been reviewed and does not provide any fallback to a software based or otherwise non-secure RNG - as was the case for Coldcard. The TRNG is evaluated under AIS-31 and certified at PTG.2. The Secure element carries Common Criteria certification at EAL5+ or EAL6+, depending on the signer. LedgerOS, the Ledger Enterprise platform and PSDs are reviewed regularly by our internal security team, the Donjon, learn more in the comments. Ledger Enterprise's Personal Security Devices and Secure Element architecture are not exposed to the RNG issue affecting Coldcard Mk3 devices.

Sea, sand, and optimized swaps: straight from your deck chair. Clear Sign transactions right at the beach with your private keys protected, completely free from compromise 🔐🏖️

Ledger is proud to support the growth of the game of basketball around the world. Great having you in our neighborhood, Spurs Sports & Entertainment 🇫🇷 🔒

🎙️ New podcast episode of XRPL Insights – On-Chain Finance #DeFi 2.0 is reshaping how institutions think about digital assets — and this conversation gets right to the heart of it. ▶️ Watch the full conversation here: https://lnkd.in/dVMegmwy Odelia Torteman (Head of Digital Assets, XRPL Commons) sits down with Takatoshi S. (Head of APAC and Global Head of Blockchain Services, Ledger) to unpack: 🔹 #Stablecoins as strategic treasury assets — moving beyond trading tools into balance-sheet strategy 🔹 The new battleground of on-chain yield, and the credit layer connecting it all 🔹 Ledger's evolution from "storage to utility" as institutional needs mature 🔹 XRPL's native lending and compliance-ready architecture 🔹 What it will actually take for on-chain loans and agentic finance to become truly institutional-grade If you're following where institutional digital asset adoption is headed, this is a conversation worth your time. Listen to the teaser of the interview: https://lnkd.in/dF_kVtKs #XRPL #DigitalAssets #InstitutionalFinance #Blockchain #Web3

Ledger is partnering with the XRP Ledger Hackathon. Digital assets security isn't an afterthought for builders shipping on-chain products. It's the foundation. Glad to have them in the room! New York. October 24–25. Register now: https://lnkd.in/e_ZruprC

Ticket scalping and exorbitant resale fees pushed Jeremy Mitaux-Maurouard, a student in our Ledger N3XT program, to build something different. An NFT ticketing platform where attendance becomes a permanent, on-chain record. In conversation with Ledger Chief Human Agency Officer ian rogers, Jeremy walks through the venue side of the build: after a show, an agent calculates payouts owed to each artist, then each transaction routes through a Ledger signer for individual approval before funds move.

Updates to the Ledger Wallet CLI are live for you to test with your agent! The principle hasn't changed: agents propose, humans approve, hardware enforces. Your keys don’t leave your device, the agent just does the legwork. What's new in v2: 🌱 Staking & Earn optimisation: Read, compare, and stake across protocols. For example, you could try prompting your agent: "Which of my positions is underperforming? Propose a re-stake and queue it for my approval." 🔄 Swap via Ledger DEX providers, complementing the CEX providers from v1. For example, try prompting your agent: "Swap 0.5 ETH to USDC at the best rate, show me the route and fees before I sign." 🧑💻 Ring CLI: Encrypt and decrypt from your terminal or through your agent, backed by your Ledger signer. Set it up once with your device, then it works anywhere. Lose your signer? Everything is recoverable from your Secret Recovery Phrase. 📊 Usage tracking: MixPanel events help us understand how the CLI is used so we can keep improving it. Getting started takes one line: 📦 npm install -g @ledgerhq/wallet-cli Or just tell your agent: "Set up @ledgerhq/wallet-cli and its agent skill for my Ledger." Then ask your agent to give feedback to our Product, Engineering and Dev Rel team (responsible for developers.Ledger.com) based on your experience! Build, swap, stake, and encrypt, with your keys staying exactly where they belong.

AI agents can move fast but speed without a security boundary is just a faster way to lose control. Here's the architectural argument for why agents should propose and humans should sign. 👇

"These agents are incredibly powerful, but they run on AI that's incredibly gullible. There's basically no way for it to NOT leak your personal data, get poisoned, or just be attacked." That's Leonard Lin, CTO of Shisa.AI, on why he built Shisa D, in conversation with Ledger Chief Human Agency Officer ian rogers. "I'm going to try to write the secure version. How hard could it be?" Months and billions of tokens later, it's getting there. Watch the full episode to learn how Ledger solves this 👇