horror story ... 👇 👀 👇
"All txs goes via ledger servers to broadcast tx. I accepted address, amount and fee and confirmed tx and then ledger live was trying to broadcast tx, but failed, but tx was sent successfully "
"when i was signing this transaction ledger just asked about address which received 0.5 btc and no more recipients was asked about, so ledger was thinking that it’s correct change address, but i can’t figure out who is generating this change address: ledger live or hardware device itself. If ledger live, so there is possibility of ledger live was compromised. "
lesson: always double triple check the recipient address is valid and the most important, change address is your OWN valid address. check the change address using a clone of current wallet on other device (cold storage). maybe its better if the clone wallet on cold storage using different software/hardware wallet.
source: