Rogue Developer Steals $768,000 in Crypto with Fake Ledger Live App

Open the Ledger Live application on your computer or mobile device.5. This is where you can manage and install apps on your Ledger device.6. Find and choose the app for the cryptocurrency or service you want to use.

Ledger Stax™

One of the biggest concerns for anyone practicing self-custody is losing their secret recovery phrase. It’s the key to your entire digital portfolio – lose it, and you lose everything. The beauty of using a crypto wallet is the security it provides to your private keys. The big idea behind crypto wallets is the isolation of your private keys from your easy-to-hack smartphone or computer – basically anything that can expose your private keys on the internet. Unlike most apps, the Ledger Live crypto wallet app keeps your data directly on your phone or computer, so there’s no need to sign in using an email and password.

A free Bitcoin wallet app and much more

Ledger devices protect your private keys and allow you to experience the value in web3 with the peace of mind that your digital assets are always protected against physical or online threats. The only thing Ledger cannot protect you from is user error. However, it can optimize the user experience and interface to mitigate the risks of such instances. Since 2014, Ledger has been safeguarding digital value, offering top-tier security to blockchain users with industry-defining hardware wallets. A lot has happened in crypto since then, and growing web3 adoption and advancement have also brought a string of cybersecurity threats.

NFT Management

I was thinking about switching over to Trezor but saw their app on iOS had so much negative reviews! It seems the Trezor may have open source and all that fancy stuff but Ledger is very competitive and definitely has the better app support. Not everyone wants to connect their ledger or Trezor to a bulky computer to do transactions. Looking at my money and portfolio in a beautiful interface is a must have for me. Unlike traditional backup methods, it ensures your private keys remain entirely in your control, meaning your self-custody is never affected. This way, you can regain access to your wallet securely if needed, all while maintaining full ownership of your assets.

ledger live

With this versatility, the Ledger Nano S is an indispensable tool for those who diversify their portfolios across different blockchain networks. Backed by Ledger’s time-tested security model, your assets are shielded from all kinds of threats—regardless of which device you choose. Blind signing has led to many such significant losses in the crypto community, as users unknowingly authorize transactions that give scammers access to their assets.

Security On Ledger Live

If you notice a mismatch between the blockchain address on your internet-connected device and the secure screen on your Ledger device—you know that your internet-connected device is compromised with malware. You can always trust your Ledger device’s secure screen to show you the exact transaction details. In an increasingly digital world, phones and laptop screens cannot be trusted with sensitive or confidential information. The launch of Ledger Stax and Ledger Flex makes these devices the first and only devices in the world that drive their E ink touchscreens with Secure Element chips. It is Ledger’s flagship crypto hardware wallet that grants an experience unlike any other.

Features that the Ledger Live App offers after you install on a Mac

The best crypto wallet for mobile phones is the Ledger crypto wallet. This is thanks to the fact that Ledger Live is designed to work seamlessly with Ledger hardware wallets plugged into your mobile phone using the provided USB cable. With access to the secret phrases, hackers gain full control over the wallets, enabling them to steal all digital assets.

Search code, repositories, users, issues, pull requests…

Blockchain enthusiast ZachXBT alerted the cryptocurrency community on November 5 of a fraudulent Ledger Live application in the Microsoft Store that stole almost $600,000 from users who installed it. Restore access to your crypto wallet in case of a lost, damaged, or out of reach Secret Recovery Phrase. This guide provides complete step by step instructions on how to setup a new Ledger Nano S hardware wallet, using the Ledger Live application. The fake app, dubbed “Ledger Live Web3,” misled users into thinking they were installing the actual Ledger Live interface for offline cryptocurrency storage, according to cryptocurrency detective ZachXBT. All three tech behemoths have had run-ins with rogue apps on their stores – especially the official app store for Android smartphones and tablets, Google Play. With Ledger Live, you can manage many blockchains and tokens with different accounts all at once.

A multi-crypto wallet app to secure thousands of coins and NFTs

• Always make sure your URL says “ledger.com” when using the Ledger website.
• Transactions are signed inside the device, which eliminates the possibility of their interception by intruders.
• The cyber news site also shares a Reddit post by a person claiming to have lost their life’s savings – $18,500 bitcoin and about $8,000 in alt coins – to this rogue app’s developer.
• All updates are checked on the Ledger server, which minimizes the risk of installing malware.
• As of 2024, Ledger has sold over 7 million hardware wallets – none of which have ever been hacked.
• Mentions of any cryptocurrencies or projects outside of the context of a legitimate Ledger-related question will be removed, and may result in a ban after repeated offenses.
• The best crypto wallet for mobile phones is the Ledger crypto wallet.

Proven reliable over more than a decade of error-free functioning, the XRPL offers streamlined development, low transaction costs, high performance, and sustainability. So you can build with confidence–and move your most critical projects forward. The applications are user-facing programs which depend on one or more libraries. Ledger-live is a monorepository whose purpose is to centralize all the JavaScript code related to the core-peak ledger live scan guard applications in one place. If it’s a Bitcoin transaction that got stuck, you can use a third-party wallet such as Electrum to speed up the transaction. However, make sure that the stuck transaction is still unconfirmed, otherwise, it won’t work.

Access Crypto, NFT, and DeFi

Contrary to popular belief, your crypto wallet doesn’t ‘store’ any crypto. Your crypto assets are stored on the blockchain and your crypto wallet simply allows you to manage those assets through an interface. It also supports various ERC-20 tokens and other popular cryptocurrencies.

Moreover, Ledger’s clear signing initiative makes its Clear Signing plugin a pre-requisite for dApps, apps, and providers that integrate with Ledger Live. Every app built for Ledger Live implements this plugin and also undergoes an audit. With such an expansive experience comes the highest responsibility to protect the millions of users that interact with the Ledger Live ecosystem. Upon setup, every Ledger device prompts users to create a 4-to-8-digit PIN code to unlock the device. The fake site analyzes the entered words, comparing them against a list of 2048 possible terms.

• These wallets physically store your private keys within a chip inside the device itself.
• The public key can be compared to a bank account number that you can share with third parties to receive crypto without worrying that your assets will be compromised.
• In this new era of digital wealth, true freedom comes from owning your financial future.
• Put simply, using your phone or laptop to store private keys is like leaving a bank vault in the middle of a shopping mall.
• To send or receive any crypto, the first thing you need to do on your new Ledger is install the apps for the cryptocurrencies you want to store.
• As the world’s first private encrypted information backup solution, it operates without the need for an email ID or password.

When you set up a hardware wallet, a 24-word seed phrase is created, which is a backup copy of your keys. Ledger Live requires you to enter a PIN code every time you connect the device, preventing unauthorized access to your assets. I think it’s crazy people will actually use soft wallets that take control of your keys. Not with Ledger, not only do you have absolute full control of your keys but multiple methods to enjoy moving crypto using their platforms. Think of it like taking a vacation to some beautiful island owning your freedom being in control on sandy beach without any fears, worries or banking systems.

• You can manage your assets at any time, conduct monitoring, exchanges, and other operations.
• Blind Signing refers to signing a transaction you don’t understand and cannot interpret in a human-readable format.
• Your private key, which is used to retrieve all of your cryptoassets from the blockchain, still will be stored safely offline in the Ledger Nano S.
• This comprehensive approach ensures that you stay informed about your digital assets’ status while enjoying enhanced protection.
• ZachXBT believes that the vetting process is not thorough enough.
• Only you, the owner of your Ledger device, can decrypt this information.
• Users with a bank transfer or card purchase can use a service like MoonPay and make a payment using PayPal to purchase cryptocurrencies.

The scammer had “amended” his own version of the open source Ledger Live software before submitting it to the Microsoft Store. The app review team failed to notice some red flags, as highlighted by some. ZachXBT followed up with an update hours later confirming that the app’s developer had made off with $768,000 before Microsoft finally learned of the scam and yanked the app from its digital marketplace. It will be easily installed in Linux through any of the Linux distributions that support AppImage. The technical parameters meet the requirements for Windows and MacOS. The app is designed to run on Windows, macOS, and Linux operating systems.

What Is Ledger Live?

This is where Ledger’s security model separates itself from the norm. It is possible to buy crypto with a credit/debit card or bank transfer. Choose from a range of service providers – Paypal, Ramp, MoonPay, Sardine – and select the option that works best for you.

Ledger was the first hardware wallet to implement a secure chip, which is part of the reason a Ledger device has never been hacked! But Ledger’s security model doesn’t just rely on the Secure Element. Self-custody means you and you alone hold and manage your private keys, giving you full control over your digital assets. It eliminates the need for third-party custodians, making you solely responsible for the security of your assets. Download to set up your Ledger wallet and begin securely managing all your digital assets in one place.

Never lose access to your wallet

Some cynical people might think that this is actually a design of the app is that they don’t actually want people to be able to easily withdraw funds. These wallets physically store your private keys within a chip inside the device itself. The Ledger Live app is a safe and easy interface for managing your cryptocurrencies using your Ledger device. Non-custodial wallets are completely controlled by you and you alone, meaning they are censorship-resistant and also have no transaction limits. In other words, a non-custodial wallet is your one-way ticket to financial freedom. A non-custodial wallet is a direct link to your blockchain address without any dependence on another entity, eliminating the possibility of asset confiscation.

You can manage your assets at any time, conduct monitoring, exchanges, and other operations. Besides, with Ledger Live, you will be able to access a decentralized application and Web3. The most secure crypto wallets are physical devices called hardware wallets, designed to enhance the security of your private keys by securely storing them offline.

Even if the phrase is entered correctly, the site reports it as “invalid,” compelling the user to re-enter the data. A second cryptocurrency wallet used for the scam had collected about $180,000 from victims. Microsoft reacted on the same day and removed the app from the store but the fraudster had already transferred more than $768,000 from victims. Unlimited phone and email access to our USA based support team.

As always, stay vigilant and never share your recovery phrase with anyone. Scammers are targeting every crypto subreddit hoping to separate you from your crypto. Our subreddit is constantly under attack by criminals and scammers looking to separate you from your crypto. Keep your recovery phrase safe, offline, and never share it with anyone. Libraries serve as publicly available packages, designed for integration with other libraries or applications.These packages are deployed to the official npm repository under the @ledgerhq organization.

I’ve heard people say that only ETH or erc-20 tokens can be taken. Ledger Live is integrated with the Ledger Manager feature, which verifies the authenticity of all installed applications and updates. This protects against fake programs and phishing sites that may try to steal user data.

There’s no transaction history indicating anything unusual either. Once you have connected your Ledger device to MetaMask and initiated the transaction, there will be an option to cancel or speed it up in the transaction list. To fix a stuck transaction on the Ethereum network, you can either cancel or speed it up in MetaMask. The developer, Ledger SAS, indicated that the app’s privacy practices may include handling of data as described below. This article guide describes how you can add a token with its supported network on Ledger Live. In recent years, he has turned his focus to cybersecurity in his role as Information Security Analyst at Bitdefender.

Here, you can go to the security settings of web services—such as Facebook, Google, and Dropbox—and register your Ledger device. The cryptocurrencies that you can stake from your Ledger Live include, but are not limited to Tezos (XTZ), Solana (SOL), Ethereum (ETH) and much more. If you own some XTZ tokens, you can stake them through the Ledger Live app to help secure the Tezos blockchain. Similarly, if you own some TRX, you can stake them to help secure the Tron blockchain. With staking, you earn rewards in return for locking up—or staking—your cryptocurrency in special contracts that help secure the blockchain network to which that cryptocurrency is native. Does that also compromise BTC, Cosmos, Solana, Chainlink, etc… accounts as well?

Given all the signals that alert of a possible scam, it is uncertain how the fraudster managed to publish the app in the Microsoft Store. ZachXBT believes that the vetting process is not thorough enough. Finally, enter the address of the Leger in the pop-up menu and set the signatory power you like. To add the Ledger address as a signer, log into the your dashboard with your admin account and select “Multisig Keys” in the left menu.