Ledger hacked or vulnerable

[ABCbits]

Also don't forget that Ledger used to make fake/false claim private key can't leave or extracted from their device.

Honestly, many (if not all) hardware wallet manufacturers are guilty of making that claim. They have said in one way or the other that keys and sensitive information can NEVER leave the device secure element chips. Ledger was the first and only one that we know of that built a key extraction feature into its software but that doesn't change that hardware wallets can function in a way we were told they couldn't. Build in key extraction firmware and suddenly keys are no longer safe in their enclosures.

I wouldn't be very surprised if secure element on other hardware wallet also could extract it's private/sensitive data, either due to vulnerability or intentional choice. But IMO the Ledger case is especially bad, because it's intentional choice with paid subscription and they used to have great reputation among enthusiast. I still remember people used to recommend either Ledger or Trezor many years ago.

[m2017]

I still remember people used to recommend either Ledger or Trezor many years ago.

That is because Ledger "took a wrong turn" in its evolution. Technically, their HW devices remain reliable - there have been no breaches to date, and owners can still safely store their assets (though one wonders for how long). However, Ledger's attempts to profit from ancillary services - such as the paid Ledger Recovery subscription, staking, and now stablecoin loans (USDT \ USDC) collateralized by bitcoin (https://x.com/Ledger/status/2107857814710587774) - raise doubts about their original commitment to customer-centricity and meeting the demand for hardware wallets . It is transforming from a company offering "engineering solutions" into something resembling a semi-online banking \ exchange intermediary. However, other companies are introducing similar features as well (such as Trezor).

Ledger has tarnished its reputation through leaks of customer personal data, questionable services like Ledger Recovery, and closed-source code. Who knows - maybe they have other surprises in store for their customers.

By the way, I almost forgot about their lies:

Also don't forget that Ledger used to make fake/false claim private key can't leave or extracted from their device.