Ledger’s SDK snitched users’ transaction data and device info

Ledger’s software development kit has been transmitting transaction-signing details and metadata to the company’s servers, according to a new code review. The SDK reportedly sends transaction metadata and device information alongside signing operations, raising questions about how much data the hardware wallet maker collects from users. The finding matters because Ledger devices are marketed as self-custody tools, and the leak concerns data rather than private keys. It follows earlier scrutiny of Ledger’s data practices, including its Ledger Recover service. What to watch next is whether Ledger patches the SDK, discloses exactly what is transmitted, and whether other wallet providers face similar reviews.