Skip to main content
Sign in

Ledger Live

avoid.net/ledger-live→50/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3e5Fd4…QnfA

Summary

Ledger Live is the official companion application published by Ledger SAS for managing Ledger hardware wallets. The genuine application itself has no documented vulnerabilities that have led to direct fund loss, but the "Ledger Live" name and branding have been repeatedly and successfully counterfeited on major app marketplaces (Apple App Store, Microsoft Store, Google Play, Chrome Web Store), resulting in tens of millions of dollars in alleged theft from users who mistook fake listings for the real app. Separately, a genuine Ledger-published software component in the same ecosystem (the Ledger Connect Kit library) was compromised in a December 2023 supply-chain attack that briefly redirected funds from users of dApps integrating with Ledger hardware wallets.

Connected Entities

1 entities
Organizations
□Ledger Live
Relationships
    Have evidence about Ledger Live?

    Timeline(6 events)

    5 November 2023

    On-chain investigator ZachXBT flags a fraudulent "Ledger Live Web3" app on the Microsoft Store; Microsoft removes it the same day. Reported losses of approximately $588,000-$768,000 in crypto across multiple chains.

    CoinDesk / Bleeping Computer

    14 December 2023

    Ledger's genuine Connect Kit npm library is compromised via a phished former employee's account; malicious versions 1.1.5-1.1.7 drain over $600,000 from users connecting wallets through affected dApp front ends.

    The Hacker News

    20 December 2023

    Ledger announces a plan to reimburse victims of the Connect Kit exploit, targeting completion by February 2024.

    DailyCoin

    8 September 2025

    Ledger CTO Charles Guillemet publicly warns of a large-scale npm supply-chain attack (crypto-clipper malware) affecting the broader JavaScript ecosystem used by many crypto wallets and dApps.

    CoinDesk

    7 April 2026

    A counterfeit macOS "Ledger Live" app published under the name "Leva Heal Limited" appears on Apple's App Store; the theft campaign is reported to run through April 13.

    CoinDesk

    14 April 2026

    Apple removes the fake Ledger Live app after community/researcher reports; cumulative reported losses reach at least $9.5 million from more than 50 victims.

    Bleeping Computer
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain17 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (3 events). 17 of 19 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-code-investigator

    generated: 7/22/2026, 2:11:17 AM

    last updated: 8/27/2026, 7:08:32 AM

    4 views

    avoid.net — verified advice for a post-truth world