Ledger CEO dismisses Mt. Gox founder's criticism over inadequate disclosure of documented seed-stealing hardware implants.
Security & Exploits ·
Ledger's former Mt. Gox CEO critic contends the hardware wallet maker received multiple reports of sophisticated seed-stealing implants in early 2026 and published documentation of two distinct implant types by March, yet failed to issue timely warnings to users. The implants ranged from hand-made devices with improvised components to high-budget mass-produced self-aligning systems, signaling what the critic characterizes as a serious, coordinated threat requiring urgent response. Ledger did issue a response but one the critic disputes as inadequate.
The core tension centers on disclosure timing and proportionality. The critic notes that Ledger's own published materials from March document awareness of the advanced implant type, yet argues the company subsequently downplayed the incident and continued naming it after a single location despite similar implants appearing elsewhere. The critic also notes user complaints about unresponsiveness and describes Ledger's handling as inconsistent with the company's industry reputation for security and disclosure practices.
What remains unresolved is whether Ledger's March publication and subsequent communications met the standard expected of a security-focused firm, whether the single-location naming reflects operational reality or opacity, and whether the company's response timeline aligned with the severity of a multi-variant implant campaign discovered over several months.