2026-11-11 01:30:52
Ledger Clear Signing Defaults to Collect User Signature Metadata via SDK v1.16, Not Firmware
According to Slow Mist security researcher Yu Xian, Ledger's Clear Signing mechanism defaults to collect user signature metadata including network or chain ID, target address, device model, firmware version, app version, and blind signing status. This privacy collection is implemented in Ledger