Ledger Nano S related questions

[erikalui]

I checked out some Youtube videos and noticed that fake Ledger Nano devices have costed many users to get scammed. I received my Ledger Nano S as a gift and wish to know whether it's genuine or a fake one.

I already verified these steps given by Ledger: https://support.ledger.com/hc/en-us/articles/360002481534-Check-if-device-is-genuine

There was nothing suspicious found in sheets and I myself set the PIN and 24 words recovery phrase. I wanted to ask if we need to check the hardware as well as Ledger has given instructions to do so but I don't want to tamper with the device as it may break. Is it necessary to check the hardware as well?

[bob123]

I wanted to ask if we need to check the hardware as well as Ledger has given instructions to do so but I don't want to tamper with the device as it may break. Is it necessary to check the hardware as well?

Well, this depends on how safe you want to be.

Since the firmware will be checked once you access your nano s via ledger live, the only option which could pose a risk would be tampering with the hardware.

Do you trust the person who gifted you the nano s ? Was it a friend / relative ? Or some stranger ?
Does the case of the nano s look untouched ?

It requires quite some technical know-how to get and set up the required hardware and build it into the nano s to compromise the device.

Usually (if you got it from a friend / relative), are not paranoid and don't want to store a massive amount of BTC on it, it should be fine without checking the hardware (my personal opinion).
But if you want to be 100% sure or got it gifted from an unknown / not that trustworthy person, i'd check it.

[erikalui]

I wanted to ask if we need to check the hardware as well as Ledger has given instructions to do so but I don't want to tamper with the device as it may break. Is it necessary to check the hardware as well?

Well, this depends on how safe you want to be.

Since the firmware will be checked once you access your nano s via ledger live, the only option which could pose a risk would be tampering with the hardware.

Do you trust the person who gifted you the nano s ? Was it a friend / relative ? Or some stranger ?
Does the case of the nano s look untouched ?

It requires quite some technical know-how to get and set up the required hardware and build it into the nano s to compromise the device.

Usually (if you got it from a friend / relative), are not paranoid and don't want to store a massive amount of BTC on it, it should be fine without checking the hardware (my personal opinion).
But if you want to be 100% sure or got it gifted from an unknown / not that trustworthy person, i'd check it.

I won it in a competition held by Swissborg. The case of nano s was untouched.

I'll try to get it checked from a good technician but since it has no screws like a laptop, it could damage the device of which I am scared. The Ledger Live app helps to detect genuine devices but if that's no enough, I would be left to open the device to get full confirmation.

[Pmalek]

The Ledger Live verifies only the software part of Ledger devices does it not? In order to check the individual hardware components and compare them to the official pictures posted by Ledger on their site you would have to actually open your device, like you said, and inspect each individual piece. 

[Lucius]

erikalui, I agree that we should be extra careful when it comes safety of our coins, but we should not exaggerate is some things. What I'm interested in this story is whether you do not trust Ledger as the company or Swissborg?

I'm not too technical to say how easy or difficult is modify Nano S hardware, but I believe it is not easy, or a cheap process. Such attack would probably aim on user with significant amount of coins, a not on a random users.

Good way of testing hardware wallet would be to create wallet, and then deposit smaller amount of coins in such wallet. If device is compromised coins would move from your wallet in case hacker is not patient enough to wait that you deposit more.

[erikalui]

erikalui, I agree that we should be extra careful when it comes safety of our coins, but we should not exaggerate is some things. What I'm interested in this story is whether you do not trust Ledger as the company or Swissborg?

I'm not too technical to say how easy or difficult is modify Nano S hardware, but I believe it is not easy, or a cheap process. Such attack would probably aim on user with significant amount of coins, a not on a random users.

Good way of testing hardware wallet would be to create wallet, and then deposit smaller amount of coins in such wallet. If device is compromised coins would move from your wallet in case hacker is not patient enough to wait that you deposit more.

I trust both Ledger and Swissborg but I am not sure if Swissborg bought it from a reseller and I have read many cases of resellers selling tampered Ledger Nano S which is why I wanted to confirm if the hardware is also safe to use. Will try sending few coins first and will see what happens. To check the hardware, I just need to use a screwdriver to open the behind case and Ledger has given instructions to do so but I want to do it from a technician who can be more careful. Random users have lost $35k from such hacks.

[TryNinja]

I trust both Ledger and Swissborg but I am not sure if Swissborg bought it from a reseller and I have read many cases of resellers selling tampered Ledger Nano S which is why I wanted to confirm if the hardware is also safe to use. Will try sending few coins first and will see what happens. To check the hardware, I just need to use a screwdriver to open the behind case and Ledger has given instructions to do so but I want to do it from a technician who can be more careful. Random users have lost $35k from such hacks.

See this: https://support.ledger.com/hc/en-us/articles/360002481534-Check-if-device-is-genuine

Ledger has features to check if its firmware is genuine. What you need to be careful about is using an already configured device or a filled-in recovery sheet.

There was never a "hack"; in the case where the user lost $35k, he used a seed that came with the Ledger. That's a big NO and has nothing to do with Ledger's security. It's always a social engineering hack.

[Lucius]

Random users have lost $35k from such hacks.

You may have been mistaken about "hacks" in which some users lost coins form hardware wallets, it was not about tampered hardware, but pre-installed seed. Some people just use such HW without reset them and set up their own seed / PIN. This user is lost £25000 because he use such wallet, his ignorance was very expensive.

You also need to know what Ledger say about checking hardware integrity: Please handle the Ledger Nano S device with high care while you proceed. Be aware that once opened, your device will not be refundable or exchangeable.

[erikalui]

See this: https://support.ledger.com/hc/en-us/articles/360002481534-Check-if-device-is-genuine

Ledger has features to check if its firmware is genuine. What you need to be careful about is using an already configured device or a filled-in recovery sheet.

There was never a "hack"; in the case where the user lost $35k, he used a seed that came with the Ledger. That's a big NO and has nothing to do with Ledger's security. It's always a social engineering hack.

Actually I have been hacked twice once and have lost my funds so I wanted to be sure if the device has not been tampered with. That user had received a sheet with the 24 phrase words which he scratched and entered and then Ledger came up with Ledger live and started giving instructions to check if the device is genuine or not. My firmware doesn't show any problems and last check is of the hardware as I did not purchase it directly from Ledger.com.

[TryNinja]

That user had received a sheet with the 24 phrase words which he scratched and entered and then Ledger came up with Ledger live and started giving instructions to check if the device is genuine or not.

Exactly. This had nothing to do with the Ledger device. But with what came with it (which user naively believed to be real).

The Ledger that came in the box from the seller and the one that comes from Ledger.com are literally the same. The device can't be easily tampered.

[erikalui]

Now I have a new problem. I tried to update the firmware to 1.5.5 and then my internet connection got disconnected. After connecting it again, the device is stuck on Bootloader and my manager is stuck on "Navigate to dashboard on your device". I tried mostly all the solutions given on reddit but nothing helped. I am lost

[HCP]

Did you try the solutions listed on the Ledger support pages? refer: https://support.ledger.com/hc/en-us/articles/360003117594-Troubleshoot-firmware-update

[erikalui]

Did you try the solutions listed on the Ledger support pages? refer: https://support.ledger.com/hc/en-us/articles/360003117594-Troubleshoot-firmware-update

I fixed it after 3 hours of struggle but not by following instructions on ledger support website but on reddit. Reddit user said to install the chrome app and I did it using the link given on the ledger website. It suddenly worked and "update" appeared instead of "bootloader". I am tired of Ledger in just a week as everytime I would need to struggle after every update.

[Lucius]

erikalui, on what OS you are doing this update? When I try to update on Windows 7 it also stuck, but then I just try to finish update on Windows 10, and it take a minute or something like that to process become completed.

You do not have to worry too much about new updates, firmware is not something that is updating so often, once or maybe twice in a year in case of Ledger. I'm a little surprised that Nano S you get from that competition came with old firmware, version 1.5.5 is released on January 16 2019, so this device is from some old stock.

[erikalui]

erikalui, on what OS you are doing this update? When I try to update on Windows 7 it also stuck, but then I just try to finish update on Windows 10, and it take a minute or something like that to process become completed.

You do not have to worry too much about new updates, firmware is not something that is updating so often, once or maybe twice in a year in case of Ledger. I'm a little surprised that Nano S you get from that competition came with old firmware, version 1.5.5 is released on January 16 2019, so this device is from some old stock.

I am using Windows 10. I disconnected the ledger device and then reconnected it after pressing Update and it was stuck on bootloader for like 3 hours. As per Reddit and Ledger instructions, I shut down Ledger live, disconnected Ledger, then clicked Repair but nothing happened and then I had to install the Chrome app after which it showed "Update". It took a minute then to update. I checked online and noticed people saying it takes 30 mins for Ledger Manager to open when servers are busy.

I got the device in March 2018 while I started using it recently. Was busy relocating so did not get time to start it. The firmware I guess was 1.3.3 version, not sure.

[Pmalek]

erikalui, on what OS you are doing this update? When I try to update on Windows 7 it also stuck, but then I just try to finish update on Windows 10, and it take a minute or something like that to process become completed.

That is probably because Ledger Live doesn't support Windows 7 anymore. Many users have reported different kinds of bugs and stability issues and most of them involve things like the application freezing, crashing and giving different kinds of errors.

[Lucius]

I got the device in March 2018 while I started using it recently. Was busy relocating so did not get time to start it. The firmware I guess was 1.3.3 version, not sure.

There is no firmware version 1.3.3, only 1.3.1, but this is too old firmware that you get it in your device. Maybe Swissborg bought it from Ledger long time ago, and such old firmware may be the cause of the problem since after 1.3.1 Ledger release three more updates, and process of updating from 1.3.1 to 1.5.5 may take a little longer than usual.

Pmalek, I know that Ledger Live is not working on W7, in my case it just crash after few minutes, or even does not start. I did not try the newer versions of Ledger Live, but it seems that Ledger will do nothing in this matter.

[erikalui]

There is no firmware version 1.3.3, only 1.3.1, but this is too old firmware that you get it in your device. Maybe Swissborg bought it from Ledger long time ago, and such old firmware may be the cause of the problem since after 1.3.1 Ledger release three more updates, and process of updating from 1.3.1 to 1.5.5 may take a little longer than usual.

Pmalek, I know that Ledger Live is not working on W7, in my case it just crash after few minutes, or even does not start. I did not try the newer versions of Ledger Live, but it seems that Ledger will do nothing in this matter.

You are right about it being 1.3.1 and I had not check the version on my device then before updating it. I checked their blog and they released the 1.3 version in early 2017 so probably 1.3.1 was released back then. So Swissborg may have purchased it during that time only. When 1.5.5 released, there were more problems faced by users so I guess it may happen during every update and we need to update the apps also everytime. I was stuck on syncing my account yesterday and it crashed thrice. My update from 1.3.1 to 1.5.5 took 2 mins after solving the problem but it got stuck in between.

I read it works better on Mac devices.

[erikalui]

Just a question: Does Ledger Nano S support all ERC-20 tokens that myetherwallet supports? I check this link and some of my coins are not listed here but are supported by myetherwallet.

[HCP]

Just a question: Does Ledger Nano S support all ERC-20 tokens that myetherwallet supports?

Theoretically yes... because all MEW (or MyCrypto) does is get the "public key" for your ETH address(es) from your Ledger device when you log in. So any Token "supported" by MEW/MyCrypto should be able to be viewed once you log in with a Nano device.

NOTE: You don't need to install anything other than the ETH coin app on the Ledger device itself... there aren't individual apps for tokens, ERC-20 support is included in the ETH app.