Skip to content
CUNICULA

Ledger

Self-custody hardware signers with human-approved transactions.

ledger.com

XVisit site

Self-custody hardware signers with human-approved transactions.

Common useSelf-custody cold storageHardware walletOperator dataHosted
Identity checksZero KYCNo document check recorded · identity exposure level 2/4
Evidence and riskVerified evidenceCautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.
Last reviewedReviewed 26 Aug 2026KYC checked 26 Aug 2026 · verified jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskCaution
Evidence and facts

Evidence and facts

CUNICULA SCORE 4.0
60/100Reviewed evidencePrivacy 11/25 · Control 20/20 · Transparency 8/20 · Security 14/25 · Accountability 7/10 · Cap 69 · Method
JURISDICTIONFR
INCIDENTLedger Connect Kit supply-chain compromise
resolved · critical · since 2023-12-14
A phished former employee's NPMJS access was used to publish malicious Ledger Connect Kit versions 1.1.5-1.1.7. DApps dynamically loaded the package and users who approved malicious EVM transactions suffered asset drains. Ledger's report says the attacker did not access Ledger infrastructure, code repositories or the DApps; this was not a compromise of hardware-wallet private-key or recovery-phrase storage. Ledger estimated active draining lasted less than two hours and complete resolution took about five hours. Ledger Security Incident Report (2023-12-20)
INCIDENTE-commerce and marketing database breach
resolved · high · since 2020-06-25
Initial 2020-07-29 disclosure: approximately 1 million email addresses and, within that population, a subset of approximately 9,500 customers with detailed contact/order data were exposed. Separately, Ledger's 2020-12-21 update said the public dump showed approximately 272,000 detailed records. The initial disclosure excluded payment information/passwords and Ledger stated there was no hardware-wallet, Ledger Live or crypto-asset impact; leaked contact data created continuing phishing and physical-targeting risk. Ledger initial disclosure (2020-07-29), Ledger later public-dump update (2020-12-21)
AUDITED BYNo audit listed
OPERATOR DATAHosted operator recorded
SOURCE COVERAGE
Verified evidenceTHIRD-PARTY REPORTED2/12Reviewed 26 Aug 2026 · Source → official site
LAST CHECKED2026-08-25T23:48:26Z
LAST UPDATED2026-08-26

Specs

DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 2/4
KYC TRIGGERSA standard hardware order requires contact, billing/shipping and payment/order data, and is screened for fraud and sanctions. The current sales terms do not state a routine identity-document requirement, but Global-e may request additional verification. Buy, sell, swap and similar Ledger Wallet integrations are third-party services and may apply KYC/KYT.
FEECurrent official comparison payload showed base USD prices from $59 to $399 (Nano S Plus $59; Nano X $79; Nano Gen5 $179; Flex $249; Stax + Recovery Key $399). Final checkout pricing, taxes, delivery, import charges, partner fees and network fees vary.
LIMITNo device-level transaction limit stated; blockchain rules and integrated third-party provider limits apply.
NETWORKSBTC, ETH, BNB, XRP, SOL, TRX
CATEGORIESHardware wallet
COMMON USESSelf-custody cold storage, On-device transaction verification, Multi-chain portfolio management, Human-approved agent signing
FEATURESCurrent hardware line: Ledger Stax, Ledger Flex, Ledger Nano Gen5, Ledger Nano X and Ledger Nano S Plus, Certified Secure Element (CC EAL6+ on the current comparison page), Ledger Wallet desktop and mobile companion apps, 500+ coins directly in Ledger Wallet; 15,000+ crypto and 100+ chains advertised across supported integrations, Buy, sell, swap and stake integrations through third-party service providers, Ledger Wallet CLI and Agent Stack with physical signer approval for every signing step, Public Ledger Wallet source repository; most projects MIT-licensed, Proprietary Ledger OS firmware with separately developed device applications
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
Agent payments

Spend controls and data exposure

Current v1 tooling supports read-only agent actions and transaction preparation, but every signing step requires affirmative physical confirmation. This is human-approved execution, not unattended autonomy; Ledger labels bounded autonomy and policy features as coming soon.

Payment toolsCompareWallet risks
Protocols
Manual
Autonomy1 / agent drafts
CustodySelf-custody
Approval
Human approval
Controls
CLIManual approval
Limits
Spend limitsNo
Merchant lockNo
Category lockNo
Pause / closeNo
WebhooksNo
Privacy
SettlementCrypto
FundingCrypto funded
IdentityUnknown
Logging riskUnknown
RevocationUnknown

The signer remains self-custodial, but Ledger Wallet and integrated third parties may process equipment IDs, wallet addresses, on-chain/transaction data and provider-required identity data as described in the privacy policy.

Where payment data goes
  1. 1Agent prepares or queries
  2. 2Ledger Wallet CLI
  3. 3Ledger signer trusted display
  4. 4Human physical approval
  5. 5Blockchain
Sources

About

Ledger sells self-custody hardware signers and provides the Ledger Wallet desktop/mobile application. Private keys remain under user control on the signer; buying, selling, swapping and some staking functions route through separate providers with their own terms, fees, availability and KYC/KYT rules.

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY
Ledger SASsource ↗
REGISTRATION NO.
529 991 119source ↗
INCORPORATED IN
Francesource ↗
REGISTERED ADDRESS
106 rue du Temple, 75003 Paris, Francesource ↗
Registry research · reviewed 2026-08-26

We wrote about this

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. A standard hardware order requires contact, billing/shipping and payment/order data, and is screened for fraud and sanctions. The current sales terms do not state a routine identity-document requirement, but Global-e may request additional verification. Buy, sell, swap and similar Ledger Wallet integrations are third-party services and may apply KYC/KYT.

Which payment methods are accepted?

Accepted payment methods: BTC, ETH, BNB, XRP, SOL, TRX.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

No. The recorded jurisdiction is FR, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 2 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-08-26, and recorded risk is caution.

Which payment networks are supported?

Accepted networks: BTC, ETH, BNB, XRP, SOL, TRX.

Sources and history

Terms and privacy policy

No changes to the documents we watch since we started checking on 26 Aug 2026. Last checked 26 Aug 2026.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.