Leisure SDK module 1.16 or higher, signature information collected by default noted

Ledger's hardware-wallet SDK, specifically the context-module from version 1.16 onward, now collects signing-related metadata by default, including network and chain ID, smart-contract or recipient addresses, device model, firmware and app versions, and whether blind signing was used and why. SlowMist founder Yu Xian flagged the practice, noting that wallet apps connecting to Ledger must expose the relevant settings to users. The disclosure follows earlier reports that Ledger's SDK transmits recipient addresses and device information under default configurations. The issue matters because it expands what leaves a user's device at signing time, a sensitive point for self-custody wallets. What to watch next is whether Ledger changes defaults or documentation and whether integrating wallet apps add opt-out controls.