- Privacy concerns surround Ledger Live amid users tracking claims.
- REKTBuilder’s findings shed light on the privacy of cryptocurrency software.
- Ledger’s response to tracking allegations draws the crypto community’s attention.
An investigation by REKTBuilder has raised concerns about the extent of data collection by Ledger Live, the official software for managing Ledger hardware wallets.
The developer claims that Ledger Live tracks every move users make, including the apps they install and the crypto they hold.
According to REKTBuilder’s findings, Ledger Live is purportedly tracking its users and collecting data on their wallet usage, including details about the apps they install.
This revelation has ignited discussions within the cryptocurrency community regarding user privacy and the implications of such tracking.
Ledger Live’s Alleged Tracking
REKTBuilder claims to have uncovered a “genuine device check” embedded within Ledger Live’s Python code, which activates every time a user connects their Ledger hardware wallet to a computer or mobile device.
Ledger Live embeds the genuine check into the apps listing procedure. As it is, they always doxx your device when installing or updating apps and firmware. I removed most tracking in Lecce Libre, but they still track you regardless.
For the past couple days I'd been trying to… pic.twitter.com/Q1aF1qpjge
— REKTBuildr 🔺🔺🔺 (@rektbuildr) December 27, 2023
This device check compiles a list of all the apps installed on the user’s device, providing Ledger with insights into the networks accessed by the wallet owner.
See Also: Vitalik Buterin Wants To Simplify The Ethereum Network’s High Validator Load
The alleged tracking is said to be seamlessly integrated into the app listing procedure, exposing user data during app installations and firmware updates.
While REKTBuilder attempted to remove the tracking code, they reported that doing so rendered the software unusable, suggesting that a truly “tracker-free” version of Ledger Live may be unattainable.
This suggests that Ledger had intentionally designed Ledger Live to track user activity.
“I tried disabling the remote tracking, and it’s impossible; it breaks if you do,” stated REKTBuilder.
“Which means Ledger knows it’s you every time you plug the device in.”
Rekt Builder’s findings raise serious concerns about the privacy of Ledger hardware wallet users.
If Ledger is tracking each move users make, then it is possible that this data could be used to identify users and track their crypto transactions.
This can be dangerous because a hack into any of Ledger’s centralized servers can mean malicious agents can control critical data, which can then be used to target individuals with large holdings of Bitcoin and other coins.
Previous Privacy Concerns And Response
This is not the first time Ledger has faced privacy concerns. Earlier in December, REKTBuilder had reported that Ledger Live was recording users’ cryptocurrency balances.
See Also: RenrenBit Founder, Zhao Dong, Sentenced To Prison Over Illegal Crypto Activities
In response to these concerns, REKTBuilder introduced an open-source alternative to Ledger Live named “Lecce Libre,” which was promoted as “tracker-free.”
Despite these allegations, some users still opt to use Ledger Live due to a perceived lack of hardware wallet alternatives for certain cryptocurrencies, such as Avalanche.
