a new "feature" where you can recover your keys from some centralized institutions if you KYC because the software can extract your private key and upload it to external servers.... which so purely and idiotically defeats the purpose of a hardware wallet that it's hard to comprehend WTF they were thinking.

Basically they built a backdoor into their own device to extract the private key and are calling it a feature.

Reply to this note

Please Login to reply.

Discussion

Oh wow... Sounds like I need to get rid of my ledger.

And move all coins to a new wallet? You could also not upgrade I guess. Not sure if that will work.

This is insane. They’ve already had a data breach where they doxxed their customers. Though it seems if you don’t update the firmware you *might* be safe. The whole idea of opening an API to pull out your seed phrase is terrifying, and the exact opposite of what most customers want/expect.

Any podcasters or YouTubers, please help get the word out!!