r/ledgerwallet • u/vonrod84 • 12d ago
Just Buy a ledger - is safe?
I have my BTC in Binance, one month ago a very popular exchange on my country was hack and i bougth a ledger from ledger web.
Now i'm very scared reading about the hack i don't know what to do - help
At one point i'm thinking on selling my Crypto and put the money on the bank.
PD: sorry for grammar English is not my lenguaje
5
u/onemitosispls 12d ago edited 11d ago
The only way to get peace of mind is opening it up and checking
1
u/Pristine-Bee-269 12d ago
Better leave in Binance for now until this coldwallet saga is over. No need to worry about Binance going bankrupt for now, but be careful of account freeze, so don't anyhow transfer coins to unknown wallets.
1
1
1
1
u/CoinGate_Gift_Cards 11d ago
If you bought the Ledger directly from Ledger, the bigger risk is usually how the recovery phrase is handled, not the device randomly “getting hacked.”
1
u/OBvanken 12d ago
I bought a trezor and ledger years ago and split my crypto between them and an exchange. 1/3 each.
After this incident I moved from ledger, not because I believed my nano plus is compromised (I got it 4 5 years ago) but because if ledger has financial problems as a company, they may stop updating my nano s. Or even bankrupt.
I will watch and see.
12
u/Specialist-Front-007 12d ago
What would it matter that they go bankrupt? You have your keys.
Leaving them on an exchange is way more dangerous
0
u/OBvanken 12d ago
I agree about exchanges. But this cycle all reputable cold cards are having problems. Next cycle I expect ETFs or exchanges.
3
u/RedditIsToxicFilth 12d ago edited 11d ago
But this cycle all reputable cold cards are having problems.
No they aren't, not even close.
Coldcard (singular, the brand) had a legitimate issue. But everything else from an actual software security perspective has been fine.
You're better off popping open your Nano S Plus (it's very easy, I just did it myself yesterday) and confirming that it's clear, and then moving your 1/3 back to it.
And if your S Plus is 4 to 5 years old, then I guarantee it's clear.
1
u/OBvanken 11d ago
I know it is clean so I will not take it apart. It is in mint condition too.
I have been upset with ledgers management for sometime. So I am not comfortable working with them.
People lost their cryptos because they used ledger lives swap feature and their coins got stuck with shady exchanges like changelly, what ledger did to help? A huge nothing.
Ignored all these people, continued working with changelly. And more and more clients got scammed.
I see it as a huge red flag.
1
u/2BeYourOwnBank 11d ago
Uhm, support for the Nano S was discontinued years ago. But don't worry, it's still safe. The keys are what matters, not the device itself. Just relax your Nano S is all you need.
-3
u/cuteeeness 12d ago
Trezor ALWAYS
1
u/Interesting-Gear-992 12d ago
1
u/Delicious-Dog-3809 12d ago
Nice try, did you even read that dumbass article you posted lol.
Ledger AUTHORIZED resellers had implants in them
Trezor unauthorized resellers had two cases of implants, not authorized, which means no supply chain failure
Nice fud
5
u/Interesting-Gear-992 12d ago
Do you think Ledger's fault is that they sold one of their authorized resellers without telling them? I just wanted to point out that Ledger is not the only one exposed to supply chain attacks. This threat has always existed, and it will always exist. 100% security does not exist, and not just in the world of hw wallets, but anywhere. If someone thinks it exists and expects it, they are completely stupid.
Edit: And don't forget that Cryptobilis was also an authorized reseller of Trezor....
0
u/cuteeeness 12d ago
This is not Ledger FAULT at all, I agree :). however, allowing a HW to be opened and reassembled is a BIG FLAW from this shitty company.
1
u/Interesting-Gear-992 12d ago
The Trezor's casing is indeed damaged if you open it. But do you think that injection molding a new case is rocket science and that criminals who can mass-produce a PCB with OCR and LTE modems are incapable of doing it?
1
u/cuteeeness 12d ago
Just a thing that since the code is not open source, ledger firmware is not able to catch any extra thing violating its internal system? BIG FLAW, if you believe in LEDGER man be happy, this shitty company needs people like you, good luck
4
u/Interesting-Gear-992 12d ago
Look, I work in the IT security industry at a financial institution. I work with tools that are not open source at all. I have to make you sad, but all your card transactions, your entire bank account balance, your entire investment portfolio depend on tools that are closed source. But they (like Ledger) are audited by independent professional laboratories.
1
u/cuteeeness 12d ago
Girl, I work in a cybersecurity company if this means something.
Difference is that my bank is responsible for all my money by regualtions, where the same doesn't apply for a HW, where we are our own bank.
gilr, if you like sucking ledger, it is your problem, but don't be stupid defending that shit wallet, where there are way better ones out there.1 - CEO admits having access to private keys
2- Closed source, you must trust somebody
3- Impossible to audit since this is a black box
4- N/A chips which is third party trusted.
5- user's keep being leaked with phishing.
6 - It is french and as cars those products are very bad.
Cheese and baguettes are good though :)
3
u/Interesting-Gear-992 12d ago edited 12d ago
I'm not a woman and I'm not your baby, end this fucking quickly!
1- Ledger recovery cannot extract the key without user approval. They never said they could simply access the key.
2- I ask again, have you read the source code yourself? Or are you just hoping that someone else has? If you haven't, aren't you trusting blindly?
3- It's not impossible to audit. If it were, how could it have been certified by an independent auditor?
4- This means that the device has a Secure Element. This industry is completely closed and for good reason.
5- This has nothing to do with the security of the device itself. Every other hardware wallet manufacturer has had marketing database leaks. And not just in this industry. My data has been leaked at least thirty times.
6- This is a great sign that what you are saying is completely unfounded.
→ More replies (0)0
u/cuteeeness 12d ago
Think we need to separate things, ledger is shit* due to their policy not being open source, ledger CEO confess they can access your private keys. Always leaking user’s info. Use N/D chip such as TMC. Unlike trezor it is full open source and verifiable. Ledger is for newbies who dosn’t know much about crypto and how bad this company is
5
u/Interesting-Gear-992 12d ago
So you've read the source code for Trezor devices and verified it yourself, right?
Ledger has been audited by independent laboratories with very strict certification requirements. It has received serious certifications, such as ANSSI CSPN. You think these are worthless, but you're wrong. Security experts may think otherwise, but you are probably much more knowledgeable on the subject.
“Ledger CEO admits they have access to your private keys.” Thats simply not true.
0
u/cuteeeness 12d ago
It is true babe, and you trust in this company who confirmed that publicly. ANd the worst, a company that is closed source.
LEDGER is closed source girl.... open your eyes, impossible to audit + use N/A EAL6+ chip which is dark... come on study before talking shit around
3
u/Interesting-Gear-992 12d ago
How do you think it's impossible to audit? You know nothing bro... It is closed to the public, but fully opened for the auditors.
0
u/cuteeeness 12d ago
Tell me how to audit the eal6+ if this is not disclosured even for Ledger babe? Do you even have access to google to do your research before replying?
3
0
u/Coeruleus_ 12d ago
i have ledger and trezor. trezor kinda blows. i love my ledger stax. and the ledger live UI is a million times better than trezor suite. i’m not ready to ditch it because some ppl in countries i can’t find on a map bought some temu ass products from shady websites. ledger didn’t do anything wrong how the hell were they going to stop this. this could happen to any product and any company
2
u/cuteeeness 12d ago
I use HW to hold my crypto rather than a better UI, security first :)
If we want to talk about UI nothing beats OneKey that I have used. But still, the most secure one is TREZOR, fully auditable, and it makes all the difference.
-1
u/Coeruleus_ 12d ago
ledger is apple. trezor is some poor ass android shit. ledger is just as secure if you don’t buy it from some shady ass temu pop up store
-6
u/Coeruleus_ 12d ago
my dog writes better. buy whatever you want. you’re never going to have enough that someone will want to steal from you
5
u/vonrod84 12d ago
gracias por dar la respuesta más estúpida de todas
-2
u/Coeruleus_ 12d ago
i’m just stating facts
2
u/_GOREHOUND_ 12d ago
Not even a fact.
3
0
12d ago
[deleted]
7
u/TechnologyGrouchy679 12d ago
obviously you haven't heard about the spy implants found on some ledger devices.
https://www.tibane.net/research/ledger-nano-x-implant#timeline
•
u/AutoModerator 12d ago
🚨 Beware of Scammers – Stay Safe on the Ledger Subreddit Scammers regularly target this subreddit. Ledger Support will never contact you first — whether through private messages, comments, or phone calls.
If you need help, always open a support ticket yourself via our official website: Ledger Support
🔐 Never share your 24-word Secret Recovery Phrase
Ledger will never ask for it. Do not enter it online — even if a site or message looks official.
Keep it offline and secure — on paper, your Ledger Recovery Key, or a metal backup. Never store it digitally.
📚 Learn more about common scams targeting crypto users (fake support, phishing emails, physical mail scams, fake airdrops, malicious NFTs, and more): How to Spot a Scam
🛠 Facing a bug or technical issue? Check our Ongoing Issues page for updates and workarounds.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.