Ledger Review: Nano Gen5, Flex, Stax and the Data-Breach Record

What you are buying, which company stands behind it, and why its finances matter to a device meant to work without any company at all.

What the product is

A Ledger is a signing device. It is not a bank, a broker, a custodian or an investment. Inside it sits a chip that generates a private key, stores it and never lets it out. When you move coins, the connected app builds a transaction, the device shows it on its own screen, you press the buttons, and the device returns a signature. The coins never live on the device. They live on their blockchains. What the device holds is the only thing that can authorise moving them.

That distinction decides everything else in this review. Because Ledger does not hold your assets, it cannot freeze them, lose them in a bankruptcy or gate your redemptions. It also cannot help you if you lose the 24 words. The failure modes are theft of the secret, coercion of the holder and user error.

The company

Ledger SAS is a French société par actions simplifiée founded in 2014, headquartered in Paris with a second site in Vierzon, in the Cher. Pascal Gauthier is chairman and chief executive. Charles Guillemet is chief technology officer and runs the in-house security laboratory, Ledger Donjon. Tony Fadell, who led the iPod at Apple and founded Nest, sits on the board and brought in the designer Susan Kare for the iconography of the 2025 Nano refresh (The Block, October 23, 2025).

Ledger has raised roughly $470M across six rounds, the largest a $380M Series C announced on June 10, 2021 at a valuation above $1.5B, extended by €100M in March 2023 at a flat €1.3B (Businesswire and CoinDesk, June 10, 2021; aggregators put the cumulative total between $468M and $488M). In the fourth quarter of 2025 an early investor sold about $50M of stock in a secondary that Gauthier led himself (Bloomberg, March 24, 2026). On November 10, 2025 the Financial Times reported Gauthier saying a record year for crypto hacks had pushed Ledger’s 2025 revenue into the triple-digit million-euro range, a claimed figure from a private company with no audited accounts behind it.

In January 2026 the Financial Times reported that Ledger had hired Goldman Sachs, Jefferies and Barclays for a New York listing above $4B, roughly triple the 2023 mark (CoinDesk on the FT, January 23, 2026). On May 13, 2026 it put those plans on hold, citing market conditions, having never filed a draft S-1, and said it might raise privately instead (CoinDesk and PYMNTS, May 13, 2026). Read the sequence as a company that wanted public-market money at the top of a cycle and did not get the window.

The regulatory status, which is almost none

Ledger is not a registered investment adviser, a broker-dealer, a funding portal, a money transmitter or a bank. It sells consumer electronics and software. SEC EDGAR returns nothing relevant for a Ledger SAS filer: no Form D, no Form 1-A, no Form ADV, no FINRA BrokerCheck record, because the business model requires none. That is a feature, not a gap, but it means no securities regulator is examining the company on your behalf, and there is no SIPC coverage and no arbitration forum if something goes wrong. The regulator that does reach Ledger is a data-protection authority: France’s Commission Nationale de l’Informatique et des Libertés.

Scale

Ledger’s own Academy pages say it has sold more than 8 million devices in ten years and secures around 20% of the world’s crypto, both claimed figures with no audited count behind them (Ledger Academy, 2026). The older company figure of more than 7 million dates from the December 2024 opening of its Paris headquarters and is the one most third-party compilations still repeat (coinlaw, 2026). Treat 7 million as the floor, 8 million as the current claim.

This section follows the device from the order page to the day you move coins, and names who is paid at each step. Ledger is paid four ways; only the first appears on a receipt.

1. The purchase, which is the weakest link

You order from ledger.com or an authorised reseller. For international orders Ledger routes the checkout through Global-e Online, a cross-border provider acting as merchant of record, which is why Global-e held Ledger customers’ names, emails, postal addresses, phone numbers and order contents when its systems were accessed without authorisation, a breach Ledger disclosed on January 5, 2026. You give a real shipping address to receive a physical object. That address is the thing that has leaked, twice.

There is no KYC, no accreditation test and no account, and Ledger cannot see your balance. The only identity check in the stack is inside Ledger Recover, which is optional.

2. Genuine Check and setup

You connect the device to Ledger Wallet, the desktop and mobile app renamed from Ledger Live in October 2025. The app runs a cryptographic Genuine Check that asks the secure element to prove, against Ledger’s root of trust, that it is a real Ledger chip running Ledger firmware. This is the most useful thing the software does, and it defeats the counterfeits that circulate on marketplaces (Ledger Academy, 2026). It works only if the app is genuine, so download it from ledger.com and nowhere else: counterfeit devices ship with counterfeit companion apps that report “genuine” for fake hardware (cybersecuritynews.com, 2026).

You then set a PIN and write down the 24-word recovery phrase the device generates. Those 24 words are the wallet; the plastic around them is replaceable.

3. What you actually own

You own a BIP39 seed and the addresses derived from it. That is a standard, so the same 24 words restore into a Trezor, a BitBox, a Coldcard, Sparrow or Electrum. Switching vendors takes minutes, not a migration, which is why the “what if the company dies” question has a boring answer.

4. Signing, and the part that goes wrong

Every transaction is displayed on the device screen before you approve it. The quality of that display is the whole security proposition, because the computer you are using may be lying to you. Ledger calls the good version Clear Signing: the device parses the transaction and shows what it does in human terms. The bad version is blind signing, where the device shows a hash and you approve something you cannot read.

Blind signing is not theoretical. In the $1.4B Bybit theft on February 21, 2025, attackers compromised a Safe{Wallet} developer machine, altered the web interface, and had Bybit’s signers approve a contract upgrade while their Ledger devices did not surface the destination in readable form (NCC Group, Fireblocks and Blockaid, 2025). The hardware did what it was designed to do and the humans signed the wrong thing anyway. Ledger’s answer is Transaction Check, which screens transactions against known-bad patterns before you approve and shipped with the Nano Gen5 in October 2025.

5. How Ledger gets paid after the sale

The device sale is the first revenue line. The second is the on-ramp: buy crypto inside the app through MoonPay, Coinify, Ramp, Sardine or BTC Direct and the provider charges you, with Ledger taking a share. The third is swaps, on the same arrangement across the aggregator’s routing partners. The fourth is subscriptions: Ledger Recover at $9.99 a month and, since October 2025, $10 a transaction or 0.05% on token transfers on Ledger’s multisig coordination service (The Block, October 24, 2025).

None of those four is required to use the device for its core purpose, and all four are placed in front of you by default. That is the commercial tension at the centre of this product.

The menu as of September 18, 2026: what each device adds over the one below it, and what the software sells beside it.

The signing devices

Nano S Plus, $59. USB-C, small monochrome screen, no battery, no Bluetooth, EAL6+ secure element. It signs everything the expensive models sign.

Nano X, $99. Adds Bluetooth and a battery for phone use, on an EAL5+ secure element rather than the EAL6+ part in the rest of the range. Sources disagree on the price: CryptoSlate in August 2026 and other 2026 trackers put the official store at $99, while Coin Bureau, Finder and hardware-wallets.net list $149 and the European store lists €119. We use $99 and flag it as the figure most likely to have moved.

Nano Gen5, $179. Launched at Ledger’s Op3n event on October 23, 2025. A 2.8-inch E Ink monochrome touchscreen at 300 × 400 behind anti-glare glass, USB-C, Bluetooth 5.2, NFC, 46 grams, a 190 mAh battery quoted at up to 10 hours, and a Ledger Recovery Key plus three recovery sheets in the box (Ledger product pages and Businesswire, October 23, 2025).

Flex, $249. A 2.84-inch E Ink touchscreen behind Gorilla Glass, launched July 2024 alongside a price increase on the Stax (CNBC, July 26, 2024).

Stax, $399. A 3.7-inch curved E Ink display, Qi wireless charging, magnetic stacking shell.

The security chip is the same class across the range with one exception. Ledger’s own materials put the Nano X on an EAL5+ secure element, the ST33J2M0, and the Nano S Plus, Flex, Stax and Nano Gen5 on the EAL6+ ST33K1M5. Several models also carry a French CSPN first-level security certificate from ANSSI: the Nano S Plus (ANSSI-CSPN-2023-13), the Nano X (ANSSI-CSPN-2023-17) and the Stax (ANSSI-CSPN-2025-03), with the security targets for all three published on the state’s cyber.gouv.fr site. No other major vendor has as many. No CSPN target has been published for the Nano Gen5 as of September 18, 2026.

The accessories and services

Ledger Recovery Key, $39, or $99 for three. A PIN-protected NFC card holding an encrypted copy of your recovery phrase on its own EAL6+ chip. Launched July 24, 2025 and shipped free in every Flex, Stax and Nano Gen5 box since. Self-custodied and offline: no identity check, no third party, no subscription.

Ledger Recover, $9.99 a month after a free first month. Your seed is encrypted, split into three fragments and held in hardware security modules by three companies in three countries: Coincover, Ledger and EscrowTech. Identity is verified twice, by Coincover and Tessi, using Onfido and Veridas. You restore by proving who you are, and Coincover attaches a $50,000 compensation promise. That is $119.88 a year, with no annual discount advertised as of September 18, 2026.

Ledger Enterprise Multisig, October 2025, on the $10 and 0.05% schedule above, and buy, sell, swap and staking inside the Ledger Wallet app through third-party providers.

Every dollar Ledger can take from you, then a five-year example in which the default path costs nearly five times the informed path for the same crypto.

The one-time cost

The device, $59 to $399, plus shipping and any local VAT or duty; listed prices exclude VAT in the US and include it in euro markets. There is no account fee, no custody fee, no assets-under-management fee and no minimum balance. The core product is a one-time purchase with no recurring charge.

The recurring costs, all optional

Ledger Recover at $9.99 a month with the first month free. Five years is 59 paid months, or $589.41, which is more than the Stax and ten times the Nano S Plus.

The transaction costs, where the money actually is

Buying crypto inside the app. Ledger charges nothing for the buy button itself; the provider sets the fee and Ledger takes a share of it. Ledger’s pages describe partner commission of roughly 1% to 3% plus blockchain costs; the providers publish more. Coinify charges about 1.5% on bank transfers and 4.25% on cards, and MoonPay adds roughly 1% to 4% on cards on top of network fees. Read the realistic range as 1.5% to 4.25%, cards at the top. No single Ledger fee table covers every provider, and there is no reason to expect one, because the fee is the provider’s to set.

Swapping inside the app. Ledger quotes 0.25% to 1% in commission plus spread and network fees. An independent 2026 teardown decomposed the total into provider commission of 0% to 0.25%, market spread of 0.2% to 0.8%, network fees and default slippage, and measured 0.8% to 1.4% all-in on a $5,000 swap in May 2026.

Staking. Ledger routes Ethereum staking through Kiln, whose published schedule takes 12% of pooled rewards and 8% of rewards on dedicated validators of 32 ETH or more; Kiln’s 0% promotional holiday ran to December 31, 2025 (Kiln documentation, 2026). That is a fee on yield, not principal, and it is avoidable by staking elsewhere or not at all.

Multisig. $10 a transaction, or 0.05% on token transfers, on top of gas, since October 2025.

Network fees. Always yours, paid to validators, not to Ledger.

The worked example

Take $25,000 of crypto, bought on September 18, 2026 and held to September 18, 2031, with two rebalancing swaps of $5,000 each. Assume a flat asset price so the fee arithmetic is visible.

Route A, the default path. Buy a Nano Gen5 for $179. Fund by card inside the app at Coinify’s published 4.25%, which is $1,062.50. Subscribe to Ledger Recover for the full five years, 59 paid months at $9.99, $589.41. Make two in-app swaps of $5,000 at 1.0% all-in, $100. Total cost: $1,930.91, or 7.72% of the stake, before any network fees.

Route B, the informed path. Buy a Nano S Plus for $59. Buy the same $25,000 on a professional order book at a 0.90% taker fee, $225. Withdraw on-chain for roughly $20 in network fees. Skip Recover and write the 24 words on the supplied card. Do the two rebalances on the same order book at 0.90%, $90. Total cost: $394, or 1.58%.

The gap is $1,536.91 on a $25,000 position, for identical coins secured by an identically certified chip. Nothing about Route B is exotic: the same crypto, the same seed standard, the same secure element family, bought through a different door.

Route C, the liquid alternative. Put the same $25,000 into a spot bitcoin ETF at 0.25% a year: $312.50 over five years on a flat balance, with no device and no seed phrase. What you give up is real: you never hold the asset, you cannot spend it on-chain, and you are exposed to the fund’s custodian. As arithmetic, the ETF beats Route A by $1,618.41 and loses to Route B by $81.50.

Two claims are on trial: that the secure element has never been broken to steal user funds, and, implicit in every marketing page, that buying a Ledger makes you safer. The first holds. The second has a large asterisk with a postmark on it.

The security claim, and why it holds

Ledger claims that private keys never leave the secure element and that no one has extracted a key from a Ledger device in the field. We found no documented case of an attacker stealing user funds by breaking a Ledger secure element. The published attacks are a different shape. In March 2018 the researcher Saleem Rashid, then 15, demonstrated a vulnerability in the non-secure microcontroller of the original Nano S that let a supply-chain attacker compromise a device before delivery; Ledger patched it (TechCrunch, March 21, 2018). Everything since has been an attack on the software around the device, the data about its owners, or the owner in person.

Compare that with the competition, because 2026 provided the control experiment. Starting July 30, 2026, an attacker exploited a build-configuration error introduced in a March 2021 Coldcard firmware release, in which seed generation fell back to a weak software random number generator and effective key strength collapsed from a designed 128 bits to as little as 40 bits on some devices. No physical access to any device was needed; the keys were computed. The first wave drained about 1,083 BTC, roughly $70.2M, from 1,196 addresses in 41 minutes. Three more waves followed over four days. Galaxy Research, tracking the sweeps in real time, had logged 1,367.05 BTC across 4,585 addresses by August 2; the running tally settled near 1,816 BTC, about $116M, which TRM Labs called the largest hardware-wallet exploit of the year (CoinDesk, July 31 and August 2, 2026; The Hacker News, Fortune and TRM Labs, August 2026). Coinkite shipped patched firmware.

That is the honest scoreboard on device engineering as of September 18, 2026. The largest hardware-wallet loss in the category’s history came out of an open-source, Bitcoin-only, air-gapped device beloved by specialists, not the closed-source French one the internet argues about. Open source is a real property, not a substitute for a certification regime and a red team.

Ledger also runs a red team against other vendors. On March 12, 2025 Ledger Donjon published findings that the microcontroller in Trezor’s Safe 3, a custom-packaged STM32F429 labelled TRZ32F429, was susceptible to voltage glitching, giving read and write access to flash and, from there, a route to tampering with entropy generation. Ledger said the Safe 5 was exposed to the same class of supply-chain risk; Trezor said the attack did not reach the Safe 5, the Model One or the Model T, that Donjon could not extract private keys or PINs, and that funds were safe. Trezor patched (The Block, Cryptopolitan and Trezor’s own vulnerability page, March 2025).

The safety claim, and the asterisk

Here is the gap. Ledger’s device has protected keys. Ledger’s company has not protected the list of the people who own one.

On June 25, 2020, an unauthorised party accessed Ledger’s e-commerce and marketing database through a vulnerability reported to Ledger’s bug bounty on July 14, 2020. On December 20, 2020 the full dataset was posted publicly: a file of 1,075,382 newsletter email addresses and a file of 272,853 buyer records with names, postal addresses and phone numbers (BleepingComputer, December 20, 2020). Contemporary reports used 270,000 and 292,000 for the buyer set; we trust 272,853 because it is the count of records in the published dump.

On January 5, 2026, Ledger told customers that Global-e, the payment and cross-border commerce partner that acts as merchant of record for international orders, had suffered unauthorised access to a cloud system. Names, email addresses, postal addresses, phone numbers and order contents including products and prices were exposed. No payment details, credentials or recovery phrases were involved, and Ledger said its own platform, hardware and software were not breached, although one technical write-up traced the access route to a misconfigured API key on the Ledger website (Ledger support notice, CoinDesk, BleepingComputer and The Register, January 5 and 6, 2026; Rescana, 2026). A dataset of 49,894 records, split 30,907 United States, 11,928 Australia and 7,654 United Kingdom, was identified in dark-web monitoring and auctioned on a criminal forum in late February 2026; that count and that breakdown are the seller’s claimed figures, and neither Ledger nor Global-e has published a number of affected customers.

The realised consequence of leaked addresses is documented. In April 2025, before the Global-e incident, Ledger owners received letters on Ledger-branded stationery, dated April 4 and surfacing publicly on April 29, citing a “critical security update”, instructing them to scan a QR code and enter their 24 words, and warning that failure to comply “may result in restricted access to your wallet and funds” (Protos, BeInCrypto, HackRead and Cybernews, April 2025). As of September 2026 Ledger’s ongoing-phishing page lists physical mail as the top threat to its customers, ahead of phone calls and fake accounts. After January 2026 a fresh campaign appeared using the language of Ledger’s own new features, asking recipients to complete an “Authentication Check” or “Transaction Check.” In earlier rounds, attackers mailed victims replacement devices preloaded with malware.

So the device claim is realised, and the safety claim is realised for the chip and unrealised for the customer.

This section is short because the honest answer is short, and because it is the one area where a hardware wallet beats every platform this publication reviews.

There is no lockup, no redemption queue, no gate, no proration, no notice period and no secondary market, because nothing is redeemed. Your coins are on-chain, a Ledger is a key, and the key works at 3am on a public holiday whether or not its maker still exists. Time to exit is the time to sign a transaction and for the network to confirm it: seconds to minutes on most chains, plus the network fee. The only queue you will stand in is at the exchange that converts crypto to dollars, which is the exchange’s constraint, not Ledger’s.

If Ledger fails, your 24 words still work. They restore into Trezor Suite, Sparrow, Electrum, BlueWallet, a BitBox or a Coldcard. What you lose is the companion app, firmware updates, support for the long tail of assets that depend on Ledger’s app catalogue, warranty service, and Recover if you subscribe. Move to another vendor at your leisure, and treat the end of firmware updates as the deadline rather than a fire drill.

The genuine liquidity risk in self-custody is you. A seed phrase written once and stored in one place is a single point of failure against fire, flood, moving house and death. That is the problem Recover and the Recovery Key both sell a fix for.

What the IRS sees when your coins sit on a Ledger, which forms arrive, and the retirement-account mistake that costs the whole tax shelter.

The device itself

Buying a Ledger is not a taxable event and is not deductible for an individual investor. Moving coins from an exchange to your own Ledger, or between your own wallets, is not a disposition. Your cost basis and holding period travel with the coins.

What is taxable, and at what rate

Under IRS Notice 2014-21, virtual currency is property. Selling it, swapping one token for another or spending it is a disposition reported on Form 8949 and Schedule D. Held a year or less, gains take ordinary short-term rates; held longer, the long-term rates under Section 1(h). Staking rewards are ordinary income at fair market value when you gain dominion and control, per Revenue Ruling 2023-14, and start a new basis and holding period. The 28% collectibles rate under Section 408(m) does not apply to cryptocurrency; that rate is for physical metals, art and similar property, and it is a common confusion for readers arriving from a gold or art platform.

The wash-sale rule at Section 1091 applies to “stock or securities.” The prevailing position as of September 18, 2026 is that it does not reach directly held crypto, so a loss harvested on a token repurchased immediately is allowed. Congress has repeatedly proposed to close this, and it is the single tax provision most likely to change in the next two years.

The forms you will and will not receive

Ledger sends you nothing. A self-custody wallet is not a broker under the digital-asset reporting regulations, because it neither holds your assets nor effects sales. Custodial exchanges are: the first Form 1099-DA, covering 2025 sales with gross proceeds only, arrived in early 2026, and forms covering 2026 sales, with cost basis, arrive in early 2027.

Two consequences follow, and they cut in opposite directions. First, the 1099-DA reports proceeds, and if you moved coins to a Ledger and back, the exchange may not know your true basis, so the form can overstate your gain badly unless you supply records. Keep your own ledger of acquisitions, transfers and disposals; it is the most valuable hour of admin a self-custodian spends each year. Second, the December 2024 regulation that would have treated certain DeFi front ends as brokers from January 1, 2027 was overturned under the Congressional Review Act in H.J. Res. 25, signed on April 10, 2025, so decentralised venues you reach from a Ledger issue no 1099-DA at all. None of that makes your on-chain activity invisible to the IRS as a matter of law; it is merely unreported by anyone but you.

IRAs, and the trap

Crypto can be held in a self-directed IRA through a qualified custodian. What you cannot do is hold the IRA’s crypto on a hardware wallet in your own house. In McNulty v. Commissioner, 157 T.C. No. 10 (November 18, 2021), the Tax Court held that an IRA owner who directed an IRA-owned LLC to buy American Eagle coins and then took physical possession received a taxable distribution equal to their cost, because an IRA owner may not take actual and unfettered possession of IRA assets. The reasoning maps onto private keys: a seed phrase in your safe is unfettered possession by any ordinary reading. If you want crypto in an IRA, use a custodian that holds the keys and accept that it is not self-custody. Ledger sells no IRA wrapper.

Nothing here is tax advice; state treatment varies.

The risk that actually ends a Ledger owner, then the dated record of what the company has been sanctioned, sued and criticised for.

The risk that ends you

It is not the chip. In order of realised frequency, Ledger owners lose money by giving the 24 words to someone who asked convincingly, approving a malicious transaction on a compromised front end, losing the seed with no backup, and being robbed in person.

That last one has stopped being exotic. Chainalysis counted more than $30M stolen in violent “wrench attacks” across 46 documented incidents in the first half of 2026, against $58M for full-year 2025, itself the record. Only 12 of the 46 attempts produced a payment, a 26% success rate. Home invasions are 37% of the incidents, and France has recorded the most publicly known attacks of any country (Chainalysis, August 2026, via Decrypt and The Block).

Ledger is not incidental to this. On January 21, 2025, co-founder David Balland and his wife were kidnapped in Vierzon. The kidnappers severed one of Balland’s fingers and sent video of the mutilation to another Ledger co-founder to extort a ransom of €10M in bitcoin. France’s GIGN tactical unit freed Balland and, in a second operation, his wife, ending the ordeal after about 48 hours; ten people were taken into custody, seven of whom face potential life terms, and French prosecutors said almost all of the ransom paid had been traced, frozen and seized (CoinDesk, Sifted, DL News and Forbes, January 23 to 25, 2025). A January 2026 Bloomberg Businessweek investigation reported that these crews find targets by cross-referencing leaked personal data from breaches.

Read those two facts together. Ledger’s customer list, carrying names, home addresses and the fact that the resident owns crypto hardware, has been published twice, and kidnapping crews are reported to shop for targets in breach data. That is the most serious criticism in this review, and it is not about cryptography.

The regulatory record

CNIL, France, €750,000, October 10, 2024. The French data protection authority fined Ledger €750,000 over the 2020 breaches, after roughly fifty complaints from French and other EU residents. Its findings: security measures short of what the GDPR requires, a breach of the storage-limitation rule on how long personal data was kept, and insufficient clarity with users about how their data would be used. CNIL released the amount but kept the deliberation confidential, and a French court refused to hand the detailed decision to breach victims on commercial-secrecy grounds. The amount and the grounds are dated and consistent across the French trade press; the reasoning cannot be read by anyone outside the parties (Siècle Digital, L’Informaticien, The Big Whale, ICI and FrenchBreaches, 2024 to 2026). We found no US or UK regulatory action.

The litigation record

Baton v. Ledger SAS, No. 3:21-cv-02470-EMC (N.D. Cal.). Filed April 6, 2021 by plaintiffs including Edward Baton and John Chu against Ledger SAS, Ledger Technologies Inc., Shopify Inc. and Shopify USA, alleging the defendants negligently allowed, recklessly ignored and then sought to conceal the 2020 breach, and that users lost crypto to the phishing that followed. The court has let the case proceed in part more than once: a 2024 ruling reported by Bloomberg Law found plaintiffs had plausibly alleged Ledger knowingly violated its own privacy policy, and an order of February 6, 2025 granted in part and denied in part the motions to dismiss, sustaining California Unfair Competition Law claims under the “unfair” and “unlawful” prongs while dismissing the CLRA claim and the “fraudulent” prong. The docket shows activity into November 14, 2025, with no reported settlement or final judgment as of September 18, 2026.

The product controversies

Ledger Recover, May 16, 2023. Ledger confirmed a paid seed-backup service and revealed that the firmware capability to export an encrypted seed share existed on devices generally, not only on subscribers’ devices, after years of marketing that said keys could not leave the secure element. Ledger postponed the launch on May 23 and Gauthier apologised for the communication. The service is genuinely opt-in and requires consent on the device, and it shipped on October 24, 2023 (CoinDesk), but the episode cost Ledger credibility with the technical audience it had spent a decade cultivating, and it is why the 2026 argument about closed firmware still has heat in it.

The Connect Kit supply-chain attack, December 14, 2023. An attacker phished a former Ledger employee, took over Ledger’s npm account and published malicious versions 1.1.5, 1.1.6 and 1.1.7 of the @ledgerhq/connect-kit library, injecting a wallet drainer into the front ends of protocols including SushiSwap, Kyber, Revoke.cash and Zapper. Ledger fixed it within about 40 minutes of being alerted and shipped 1.1.8, but the malicious file was live for roughly five hours. Reported losses range from $484,000 (CoinDesk, December 14, 2023) to at least $600,000 (The Hacker News, SlowMist and Checkmarx). No Ledger device was compromised; the failure was corporate key hygiene.

Multisig fees, October 24, 2025. Ledger’s native multisig launched alongside the Nano Gen5 and the renamed Ledger Wallet app, with a $10 per-transaction fee and 0.05% on token transfers, on top of gas. Documentation first described the service as free; CTO Charles Guillemet said that was a typo. Developers including pcaversaccio accused Ledger of trying to make its app “the single choke point for all crypto,” and the rollout did not support older Nano S hardware. Ledger said the fees pay for the coordination infrastructure (The Block, October 24, 2025; Cointelegraph and Cryptonews, October 2025).

Closed-source firmware. Ledger’s companion software is open source; the device operating system is not. Ledger’s reason is that the code driving the secure element’s peripherals is the chipmaker’s intellectual property, and that a third-party laboratory audits the OS including the closed portion before each release. That is a defensible engineering answer and an unverifiable one from outside. Trezor’s counter-position hardened in 2026: the Trezor Safe 7, at $249, pairs an EAL6+ element with TROPIC01, the first secure element with hardware and firmware published for audit, plus SLH-DSA-128 post-quantum verification of bootloader and firmware at each boot.

The complaint pattern

Ledger’s Trustpilot profile shows 3.5 out of 5 across about 2,700 reviews as of September 2026, with the company replying to 93% of the negative ones. The recurring themes are hardware failure after light use, support handled by bots before a human is reached, geographic support gaps on devices bought through authorised distributors, and anger over the breaches. Reddit threads report frozen installs, corrupted updates and balance-display errors after app updates. All of it is unverified customer report: we describe the shape and volume of complaints, not their merits. We found no Better Business Bureau profile for Ledger SAS or a US affiliate, which removes one complaint channel American readers may expect.

Two lists. The dividing line is what you hold, not how much you know.

Buy one if

You hold crypto across several chains and want one certified device that signs for all of them, with the broadest app and asset support in the category. You hold more than roughly $2,000 on an exchange, where a $59 Nano S Plus costs under 3% of the balance and buys you out of counterparty risk. You want published ANSSI CSPN certificates and a twelve-year record of no field key extraction. You will buy direct, ship to an address that is not your home, and fund from an exchange rather than the in-app buy button. If you own a working Ledger, do not replace it unless it is failing.

Skip it if

You hold only bitcoin and want maximum auditability, where a Coldcard or a BitBox02 fits better, with the July 2026 Coldcard episode as the reminder that an auditable build is not an audited one. You are committed to fully open firmware, where the Trezor Safe 7 at $249 has, since its 2026 launch, been a serious answer rather than a compromise. You hold under roughly $500, where the device costs more than the risk it removes. You have more than roughly $250,000 self-custodied, where single-signature is the wrong architecture from any vendor. You expect a company to recover your funds when something goes wrong, because that is what a custodian does and Ledger is not one. And skip the Flex and the Stax if you want them for security, because they have no more of it than the $59 model.

Ledger next to four rivals, a multisig service and the plain liquid alternative.

Table: Hardware wallets and custody alternatives, prices and terms as of September 18, 2026

Where each reader goes. Hold more than one asset and want broad support with real certification: buy the Nano S Plus and stop reading comparison threads. Hold only bitcoin and want to read the firmware yourself: a BitBox02 at about $170 or a Coldcard, with the build verified. If closed firmware bothers you and $249 does not, the Trezor Safe 7 answers the objection at the silicon level. Tangem at $54.90 is defensible for a small balance and indefensible for a large one, because you cannot verify a transaction on a card. If a single firmware defect would change your life, use Unchained or Casa with keys on two vendors’ hardware. If you want price exposure rather than ownership, a spot bitcoin ETF is cheaper than the default Ledger path.

The real sequence, because most of the money Ledger owners lose is lost in the first hour or in the delivery van.

The sequence

1. Order from ledger.com or a named authorised reseller. Not a marketplace listing, not a search advertisement, not a social post: counterfeit Nano S Plus and Nano X units with added Wi-Fi and Bluetooth modules circulate on third-party marketplaces.
2. Ship somewhere that is not your home. Parcel locker, work, PO box, and an email alias reserved for this purchase.
3. Inspect the package. If it looks opened, altered or resealed, contact Ledger support instead of using it.
4. Download Ledger Wallet from ledger.com only, and run the Genuine Check before anything else.
5. Initialise the device yourself. It must generate a new recovery phrase in front of you. A device that arrives with a preset PIN or a printed phrase is an attack, not a convenience.
6. Write the 24 words by hand on the supplied card, and keep a second copy somewhere geographically separate. Never photograph them, never type them into anything but the device.
7. Send a small test amount first, confirm it arrives, then send the rest.
8. Decide your recovery architecture before you fund it, not after: seed card plus a second location, a Recovery Key at $39, Recover at $9.99 a month, or multisig.

The six things to read before you spend money

The Genuine Check support article, so you know what a real check looks like. The Ledger Recover terms at Coincover, so you know which three parties hold which fragments and what the $50,000 compensation promise covers. The fee ranges in Ledger’s buy and swap documentation, so 4.25% on a card is not a surprise. The warranty and returns terms for your jurisdiction, because a recurring Trustpilot complaint is support declining service on devices bought outside the buyer’s country. The ongoing phishing campaigns page, so you know the current scripts. And the Ledger Enterprise Multisig fee schedule if you will use multisig inside Ledger’s app, because $10 a transaction is a different product from the free coordination tools Bitcoin developers have used for years.

We rate Ledger 3.5 out of 5, and the number hides a split verdict. As a signing device this is close to best in class: the widest asset support in the category, published ANSSI certification targets for multiple models, an in-house laboratory good enough to find real flaws in competitors’ hardware, and twelve years without a documented field extraction of a key. That record looks better in 2026 than it did in 2024, because the year’s largest hardware-wallet loss, roughly $116M drained from Coldcards from July 30, 2026 on a five-year-old build error, came from the open-source camp.

What costs Ledger a point and a half is everything outside the chip. Your name and home address have been published twice, in December 2020 and through Global-e in January 2026, in a period when violent robbery of crypto holders ran above $30M in a half-year and one of Ledger’s own co-founders was kidnapped and mutilated in the company’s own town. CNIL fined the company €750,000 over the first of those breaches on October 10, 2024, in a decision the public still cannot read, and the class action over it is pending five and a half years after filing. The commercial layer on top, a card on-ramp at 4.25% against 0.90% on an exchange, a $9.99 monthly subscription and a $10 multisig fee introduced on October 24, 2025 on a service the documentation first called free, points at a company that has found the hardware is a customer acquisition cost and the app is the business.

The rating goes up to 4 if two things happen. First, Ledger publishes the CNIL deliberation or an equivalent account of what it changed in data retention, and adopts a policy of not storing customer shipping addresses past fulfilment; that is a design change a company can make and announce. Second, the multisig fee is removed or the in-app buy default is replaced with something that does not cost 4.25%. The rating goes down to 3 on any of: a fourth exposure of customer contact data, evidence that a Ledger device’s secure element has been broken in the field, or a firmware change that alters what can leave the chip without a clear, opt-in, on-device consent flow.

What to watch, with dates. The Baton docket in the Northern District of California, case 3:21-cv-02470-EMC, for a settlement or a class-certification ruling; the last activity we found was November 14, 2025. Whether Ledger revives the New York listing it paused on May 13, 2026 without ever filing a draft S-1, because an S-1 would be the first audited view of this company’s revenue mix, and of how much comes from the app rather than the hardware. Chainalysis’s next wrench-attack update, against the $30M first-half 2026 figure and the $58M 2025 record, as the measure of whether address leaks still translate into physical risk. A CSPN certification target published by ANSSI for the Nano Gen5, which would extend the certification record to the newest device. And Trezor’s shipping volumes for the Safe 7, because if an open secure element sells, the closed-firmware argument stops being philosophical and starts being commercial. Nothing in this review is investment advice; it is research, dated September 18, 2026, and you should verify the figures that matter to you before you act.