Donjon
@ Ledger
We are the security research team at Ledger, dedicated to protecting your digital assets through cutting-edge security research, vulnerability discovery, and open-source tools.
Discover our work
- Explore
Security Bulletins
Technical write-ups of past security issues affecting Ledger products, their impact, and the versions that fix them.
- Explore
Threat Model
The security objectives of Ledger devices, the attackers they are designed to resist, and the mechanisms that enforce them.
- Explore
Tools Suite
Open-source security research tools for hardware and software analysis.
- Explore
About the Team
Who we are, how we work with vendors on coordinated disclosure, and how to get in touch with us.
Latest Publications
Security Bulletins
All security bulletins →- LSB 025 Swap flow accepted a token approval in place of a payment
- LSB 024 Clear-signing bypass via array-count truncation in the Ethereum app
- LSB 023 Command interleaving during an on-screen review could desynchronise the display from the signature
- LSB 022 Monero secret key recovery through Keccak state exposure
- LSB 021 Missing parameter validation during MCU firmware update