Ledger SDK found sending signing details and device data to its servers
AI summary
A code review found that Ledger's software development kit was transmitting signing details and transaction metadata, along with device information, to Ledger's own servers. The finding raises privacy concerns for users of the hardware wallet maker's developer tooling, since transaction metadata can reveal holdings and activity patterns. Traders and self-custody advocates may view the disclosure as a reputational hit to a major wallet vendor, though no funds are reported lost.
