Hi everyone!

I recently noticed a suspicious token that looks like a scam in my Ledger wallet, and I’d appreciate some help understanding what to do and what to avoid.

I’ve never interacted with this token or knowingly received anything related to it, so I’m wondering how it ended up appearing in my Ledger Live app in the first place.

I’d also like to remove it from the app, but hiding it doesn’t seem to work, even after trying several different methods.

Could someone explain how these scam tokens end up in wallets, whether there’s anything I should be concerned about, and how I can safely get rid of it or hide it permanently?

Thanks in advance for your help!

On ledger's site, it shows

The latest version of Ledger Wallet for desktop or laptop computers is 4.23.0

I haven't updated Ledger Wallet in a while and am using a few versions behind it. Is it always safe to do the ledger wallet update as long as you already have Ledger Wallet downloaded on your windows computer?

So either click on the

New update, install and relaunch and it updates itself

Or just close the program and then click Yes to Do you want to allow this app to make changes to your device?

Is it best to wait a week or two until after a ledger wallet update has been released to download it or you can always download it immediately?

Can someone advice if its safe to buy ledger now after all of the news or not? I am confused in these devices. I was about to buy ledger stax but then later on that day this news came. Should i buy ledger is it safe? Or trezor? Or Tangem?

Let me know if anyone can help.

​

I'm looking for an NFC card hardware wallet that can work with popular wallet apps other than the manufacturer's own app.

Tangem looks good, but I'm concerned about being locked into its app. If the company shuts down or its app becomes unavailable, I want to be able to use the physical card with another wallet app without relying on a seed phrase.

Are there any NFC card wallets that support integration with wallets like Phantom, Backpack, or other popular apps while keeping the private key securely inside the card?

I'm mainly interested in SOL support, ideally native staking. Open-source projects are a plus.

Has anyone found a solution that actually works?

I don't even have a Ledger and I get these emails about "latest system upgrade". So I just assume these are phishing scams. Be careful everyone out there!

Just received a short code message from 91999 with a ledger phishing scam about recovery and a link blah blah

The short code is from a charity service “Give Smart” seems the service was hacked or a rogue employee.. Usually I get the standard twilio..text4free full number messages, but figured I warn those since short codes are usually from legit services.

Stay safe.

Hi everyone,

I opened my Ledger Flex to inspect the internals because all those tampering stories. During the process, I accidentally touched/scraped the black ribbon cable on the right side (circled in red in the photo).

The device still works perfectly fine, but I'm concerned I might have damaged the cable.

Does anyone know what this cable is responsible for? Could this cause problems later on, even if everything seems to be working normally?

EDIT : i've just checked and it's the power ribbon cable that connects the battery to the main board, so it's ok xD

https://device.report/m/15fd2a0ef1cbbc2c99eddf061f3682c208592ca72d19beb9b2b77378ad1d0fed.pdf?utm_source=chatgpt.com

After I unlock my ledger and try to send crypto I get this error. Anyone facing the same issue? To note that ledger wallet version is up to date

If you got a letter that says it's from Ledger and wants you to scan a QR code, do not do it. I received this letter with no return address on it.

apart from their unprofessional customer service (can't answer simple questions or fix my ATM withdrawal problems), accessing the card from the Ledger app is now broken. Instead of showing my card it shows a embedded web page from their support website. Am i alone with this problem?

I havent ran Ledger Live in maybe a year or more - not sure. Somehow the software was comprimised. Out of curiosity i clicked 'resync you device' having not connected my device and the next window asked me for my seed words.

I did some checks with AI and its 100% a scam piece of sofware - no idea how I got it! No viruses detected on my machine.

Stay safe out there kids.

edit thanks for the advice everyone .. ive deleted the malicious software, got Ledger Wallet and Elrctrum running to check my wallet.

Funds are safu.

Im not really looking for advice here, I know my way around computers, just trying to raise awareness for the sake of others. Thanks for the support everyone <3

Bitcoin won’t cure corruption or political greed.
But it leaves you one question, simple, sharp and cold: who decides what you saved yesterday is worth when you’re old?

Seems to me that blockchian is always in need of actual real world uses. I'd imagine putting every ledger (or other) hardware device serial number, on a blockchain. Record movement from factory, to Ledger, to delivery, to reseller, to retail sales, as record on a block chain, may be a really good use of blockchain. As in, if Ledger has listed your hardware as aleady sold directlly to a customer weeks or months before, and you get it from Ledger again or from a reseller (not sure you should do that), that is telling. I am sure there are lots of ways this could be dialed in, but if there was ever a proven need for supply chain security, it is this damn product. Thoughs?

After the recent reports of hardware-tampered Ledger devices sold through an authorized reseller in Asia, I contacted Coolblue (a major Dutch electronics retailer) about the safety of my Ledger Nano X.

Their response was astonishing:

• "Your devices are 100% safe to use."
• "Buying from an official retailer completely eliminates the risk."
• "Ledger Live detects any tampering and refuses to work."
• "Almost all reported thefts are caused by phishing."

This completely misses the point. The concern is physical hardware manipulation, potentially undetectable by Ledger's Genuine Check, even when the device comes from an authorized reseller.

How can a major retailer make such absolute security guarantees when even Ledger itself cannot?

------------------

Dear Customer,

We fully understand that news reports can raise questions and concerns. However, we can reassure you: your devices are 100% safe to use.

If you purchase a new Ledger Nano X from an official retailer, the risk of receiving a compromised device is completely eliminated. We would be happy to explain why and what you should look out for:

Why your hardware is safe:

• Authenticity check: As soon as you connect your Ledger to the official Ledger Live app, the software automatically verifies the authenticity of the chip and firmware. If the device has been tampered with, Ledger Live will refuse to operate.
• No preconfigured recovery phrases: During the initial setup, a new Ledger generates 24 random recovery words directly on the device's screen. There should never be a pre-filled recovery phrase sheet inside the box.

So how do the thefts reported in the news happen?

News reports about drained wallets are almost exclusively related to phishing. Victims are tricked into entering their 24 recovery words online, either on a fake website or in a malicious app.

The most important golden rule for your security:

NEVER enter your 24 recovery words on a computer, phone, or website. Ledger, Coolblue, or anyone else will never ask you to do so. You should only enter these 24 words directly on the physical screen of your Ledger device when you need to restore it. Write them down on paper and store them securely offline.

As long as you follow this rule and keep your 24 recovery words offline, your cryptocurrency holdings are optimally protected.

If you have any further questions about the initial setup, please don't hesitate to contact us!

So I connected my Nano S Plus to my phone, and I was about to make a transaction but then I reviewed and cancelled the transaction to redo the it.

But soon as I cancelled and returned to the SOL app, this warning appeared on my Ledger and it scared the shit out of me.

Why would such a warning appear?

Is this some sort of attack?

Could my phone be infected with Malware?

Should I reset my Ledger?

FYI, I bought it officially via Ledger so it is not a reseller unit or second hand.

Anyone else got this email

For some time now, the numbers in the main view of the Wallet app have been overlapping. As a result, it is sometimes difficult to get a quick look at the portfolio.

OK, the coins (assets) are recorded on the blockchain so they are not directly affected if the ios Ledger app is stopped being maintained.

In case of other non-hardware wallets if anything happens to the apps, as AI says, it is relatively simple to flip the apps, ie you can restore a TrustWallet's seed phrase inside of the Metamask's app.

What about Ledger if they go bankrupt and stop maintaining the android/ios apps?

u/Finnianmu proactively provided support. Through their resilient efforts over 8 years, they have amassed 30k Karma.

Thank you for your attention to this matter. DJT 😆

Aware of the supply chain attack. Either this is a very advanced campaign or ledger is doing due diligence.

The "kids" I talked to on the phone weren't articulate, and couldn't explain what API meant, or stood for, after asking me if I'm familiar with API's... Worked in tech for 20 years. Something smells off.

Anyone getting the same?

Can someone from ledger confirm this?

Here is an example of the letter I received. I sanitized my info and the "Custom QR Code" at the bottom.

Processing img 6602zvq5zxwh1...

With links to official Ledger information.

I have a dedicated device when transacting with my Ledger device. I don’t browse, download (other than the Ledger wallet app of course), no cloud, no messaging, no cellular service. But it’s not accessible always as I don’t carry it with me wherever I go. I’m wondering whether I can set up the Ledger Wallet app on my everyday phone for read-only purposes. Given recent events, it’s convenient to quickly check whether the funds are drained yet or not 🤣😅

I understand that even a compromised device cannot drain funds as long as I clear sign the transactions after verification of transaction details, allowances, destination addresses on the device and not blind sign based on app display alone. I also understand private keys and recovery phrases and passphrase never goes out of Ledger device.

Yet, question to y’all, are you using your every day phone and if so is there any attack vector to consider? For example, I have a password to protect login to the wallet app, it will be now saved in my everyday phone which has exposure.