Ledger’s SDK Exposed Users’ Transaction Data and Device Information
Key Highlights Ledger’s latest signing kit reportedly sends wallet model, software version and queried or paid blockchain addresses to Ledger servers by default. Ambire developer Kaloyan Kosev identified the reporting behavior, which affects transaction and typed-data signing requests unless wallet apps opt out or use their own module. Ledger says the data supports clear-signing descriptors ...