r/ledgerwallet

Hello everyone, this evening I randomly felt like double checking my ledger recovery phrase using the app. I downloaded it, started it and put in my words, first time it showed invalid, i started sweating and tried another time, again invalid. I immeadiatly sent all my crypto (USDC and btc) to a trust wallet.
Then I did a third attempt on the recovery check and this time it was valid.

Now my question is, is this a known exploit / sign for my ledger device being compromised or something else going on? Has anyone ever heard of that or experienced it?

Or was it just me making mistakes on the first 2 attempts being too nervous?

J'ai effectué un transfert test de 20$ en btc de ma clé ledger à mon wallet en ligne, tout bien.
Puis 50 dollars , j'attends 1, 2 heures, le statut est bloqué...j'attends...puis je retourne sur mon compte ledger, plus rien n'est affiché dans l'historique des transaction mais mon compte btc affiche une perte de 0.16 btc /PANIQUE A BORD/ je ne sais pas quoi faire et les chatbots de ledgers sont d'aucune utilité

This might be a dumb question but honestly this is the part of crypto security that still messes with my head.

I understand the basic stuff:

• don’t type seed anywhere

• don’t store seed in cloud

• don’t sign random garbage

• don’t connect Ledger to shady sites

• use a separate hot wallet for degen stuff

• test with small amounts first

Fine.

But then you get to the actual “using crypto” part and suddenly the wallet is asking you to approve/sign something that looks like alien language.

And that’s where I don’t feel safe anymore.

Not because Ledger is bad. Ledger is doing what it’s supposed to do. The keys are protected.

But I’m still the idiot pressing approve on something I barely understand.

Like if I’m staking, delegating, setting a proxy, approving some permission, interacting with a dapp, whatever… how am I supposed to know what exactly I’m allowing?

The thing I’m trying to understand is:

If my Ledger is disconnected after signing something, can that signed permission/proxy/approval still do anything later?

Or is every later action still needing another confirmation from the Ledger?

For example, I’ve been reading about TAO/Bittensor staking and some apps use proxy-style permissions where the idea is that the proxy can do limited staking/allocation actions but can’t move funds out of your wallet. Mentat explains it that way too, proxy can buy/sell subnet positions from your account but not transfer TAO outside it.

That sounds safer than sending funds to some random vault, but I still want to understand the actual security model before touching anything.

So I guess my questions are:

1. What’s the real difference between an approval, a delegation, and a proxy?

2. Can any of those drain funds later without the Ledger being connected?

3. How do you check what permissions are currently active?

4. How do you revoke them?

5. Is there a good habit here besides “don’t sign what you don’t understand,” because tbh most normal people don’t understand 90% of what wallets show them

Not trying to spread panic. I’m just realizing “hardware wallet = safe” is only half the story.

The other half is “the human holding it should not be blindly approving hieroglyphics.”

About a week ago, I was at my sister's house and wanted to check my Ledger on her laptop. I googled the download link, and the top result looked 100% legit af. I didn't even second-guess it.

But as soon as I opened the app, it immediately asked me for my 24-word recovery phrase.

Honestly, my bad memory completely saved me here. Luckily, I didn't have my 24-word phrase memorized and had left my recovery sheet safely at home otherwise, I absolutely would have entered it. It wasn't until I got home and realized how these hardware wallets actually work that it clicked... the real app will never ask you to type your phrase into a computer. I don't know what the hell was wrong with my head at the time that I was so convinced to put my 24-word recovery phrase in.

Seriously, fuck these scammers. Stay safe out there and always double-check your URLs.

I have BTC on my Ledger Nano S. I used to access it on my ledger live on my Macbook. Its a very very old Macbook and now does not receive OS updates. Ledger Live has now updated to Ledger Wallet.

Any idea on a very low lift way to access my BTC from my ledger. I would prefer not to buy anymore cold wallets/devices and would like to maintain my current Ledger Nano S.

Would welcome any suggestions. Scammers stay away, I am not answering any DMs

Thanks in advance

So I don’t go on my Ledger Nano X regularly. I realized I needed to when I tried getting back onto it to transfer some of my crypto.

That’s when I realized it had the battery problem. I read up on the fix for it but figured it was ridiculous & why would I have something that could go south on me so easily.

CLEARLY Ledger needs to revamp the Nano X & put a BETTER battery in it.

Long story short, it wouldn’t update on the app off of my laptop. So I googled ledger.com

First result that popped up, was exactly what I was looking for, I clicked on wallet & entered my seed phrases as I had them written.

It said invalid on my ledger so I screenshotted the website & asked my L.L.M wat was going on (should’ve been done WAY before)

Either way I lost a significant amount of cryptocurrency yesterday & I’m not happy about. I managed to save 1/2 of it. But the other 1/2 is gone forever.

I reported the domain to the FBI, Chrome, & now I’m telling u guys. BE AWARE OF THE URL’s u guys are going to.

I was not & got swiped for my funds.

Call me retarded, bcz yesterday i was. It was one of my biggest learning lessons & I want to bring attention to the matter that if we’re not aggressively aware of something.

Slow down, bcz I thought I was doing everything correctly until my LLM pointed out I was on ‘Ledgar.com & not Ledger.com’

F’d me up & I’m still reeling from it. 😭🫡✌️

This might be a dumb question but honestly this is the part of crypto security that still messes with my head.

I understand the basic stuff:

- don’t type seed anywhere

- don’t store seed in cloud

- don’t sign random garbage

- don’t connect Ledger to shady sites

- use a separate hot wallet for degen stuff

- test with small amounts first

Fine.

But then you get to the actual “using crypto” part and suddenly the wallet is asking you to approve/sign something that looks like alien language.

And that’s where I don’t feel safe anymore.

Not because Ledger is bad. Ledger is doing what it’s supposed to do. The keys are protected.

But I’m still the idiot pressing approve on something I barely understand.

Like if I’m staking, delegating, setting a proxy, approving some permission, interacting with a dapp, whatever… how am I supposed to know what exactly I’m allowing?

The thing I’m trying to understand is:

If my Ledger is disconnected after signing something, can that signed permission/proxy/approval still do anything later?

Or is every later action still needing another confirmation from the Ledger?

For example, I’ve been reading about TAO/Bittensor staking and some apps use proxy-style permissions where the idea is that the proxy can do limited staking/allocation actions but can’t move funds out of your wallet. Mentat explains it that way too, proxy can buy/sell subnet positions from your account but not transfer TAO outside it.

That sounds safer than sending funds to some random vault, but I still want to understand the actual security model before touching anything.

So I guess my questions are:

1. What’s the real difference between an approval, a delegation, and a proxy?

2. Can any of those drain funds later without the Ledger being connected?

3. How do you check what permissions are currently active?

4. How do you revoke them?

5. Is there a good habit here besides “don’t sign what you don’t understand,” because tbh most normal people don’t understand 90% of what wallets show them

Not trying to spread panic. I’m just realizing “hardware wallet = safe” is only half the story.

The other half is “the human holding it should not be blindly approving hieroglyphics.”

Why can I see Canton coin listed on Ledger’s "supported assets" page, but I can't find it or add an account for it in the Ledger Live app?

Hi everyone,

Up to 3 months ago my Ledger Nano S Plus had 3 accounts: bitcoin, ethereum, cardano.

I changed my phone and had to reinstall the Ledger Wallet app on it.

Upon syncing the Ledger Nano with the new device, it propted me to update the software to 1.6.1. After that the sync was complete.

However adding new accounts on Ledger Wallet showed 0 $ balance on every one of them.
If I look the bitcoin address on blockchain, it shows has it never performed any transaction.

What am I doing wrong?

The Nano has been left unused for the last 3 months, and it was not reset in the meanwhile.

I recently moved my USDC from one ledger to another then went on the next day and it’s no where to be seen. I’ve since then tried to recover it or even send more usdc through to different accounts but it never seems to go through it shows a confirmation that it’s all sent but never comes through it’s like it’s stuck or blocked on ledgers end. I once had this problem and I bought a certain coin and it pushed though all the others? Please help

Looking to buy a Ledger Nano X but worried it will stop being supported soon because it’s from 2019 and its quite old

It has been in the box in my drawer for two years, 1000% not used in that period. I just plugged it in and the screen brightness is really bad, sad you guys put trash screens inside what is supposed to be a safe way to store your crypto.

Just found out my old nano s is bricked. When I connect it my computer doesn’t even recognize that it’s been connected and screen doesn’t turn on. I tried to purchase a newer model recently with pickup at a warehouse location but when I click submit order nothing happens. Anyone else have this issue?