Ledger Live
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 50 → 94. Problems weighed by who is responsible: incidents the subject suffered −6, problems around the subject, caused by others −3.6; legitimacy credit well known and widely used +25, long-running +4; 1 section(s) set aside until a failed fact-check is resolved; fact-check adjustments (−8) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -6 |
| Problems around it, caused by others | -3.6 |
| Well known and widely used | +25 |
| Long-running | +4 |
| Sum | 84 |
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 94/100 (kept between 0 and 100)
How scoring works →Summary
Ledger Live is the official companion application published by Ledger SAS for managing Ledger hardware wallets. The genuine application itself has no documented vulnerabilities that have led to direct fund loss, but the "Ledger Live" name and branding have been repeatedly and successfully counterfeited on major app marketplaces (Apple App Store, Microsoft Store, Google Play, Chrome Web Store), resulting in tens of millions of dollars in alleged theft from users who mistook fake listings for the real app. Separately, a genuine Ledger-published software component in the same ecosystem (the Ledger Connect Kit library) was compromised in a December 2023 supply-chain attack that briefly redirected funds from users of dApps integrating with Ledger hardware wallets.
Connected Entities
11 entities · 60 linked investigations- Ledger Live→mentioned with→SushiSwap(60%)
- Ledger Live→mentioned with→Ethereum(65%)
- Ledger Live→mentioned with→Tether(60%)
- Ethereum→mentioned with→Bitcoin(60%)
- Ledger Live→mentioned with→KuCoin(70%)
- Ledger Live→mentioned with→AudiA6(60%)
- Ledger Live→mentioned with→Bitcoin(70%)
- Ledger Live→mentioned with→Solana(60%)
- Ledger Live→mentioned with→ZachXBT(65%)
- KuCoin→mentioned with→Bitcoin(70%)
- + 30 more
Timeline(6 events)
5 November 2023
On-chain investigator ZachXBT flags a fraudulent "Ledger Live Web3" app on the Microsoft Store; Microsoft removes it the same day. Reported losses of approximately $588,000-$768,000 in crypto across multiple chains.
CoinDesk / Bleeping Computer14 December 2023
Ledger's genuine Connect Kit npm library is compromised via a phished former employee's account; malicious versions 1.1.5-1.1.7 drain over $600,000 from users connecting wallets through affected dApp front ends.
The Hacker News20 December 2023
Ledger announces a plan to reimburse victims of the Connect Kit exploit, targeting completion by February 2024.
DailyCoin8 September 2025
Ledger CTO Charles Guillemet publicly warns of a large-scale npm supply-chain attack (crypto-clipper malware) affecting the broader JavaScript ecosystem used by many crypto wallets and dApps.
CoinDesk7 April 2026
A counterfeit macOS "Ledger Live" app published under the name "Leva Heal Limited" appears on Apple's App Store; the theft campaign is reported to run through April 13.
CoinDesk14 April 2026
Apple removes the fake Ledger Live app after community/researcher reports; cumulative reported losses reach at least $9.5 million from more than 50 victims.
Bleeping ComputerDecision Log
- slot 455370283 · hash Ag1aY6p88kJ5n3JfGMq4pH3e1KXSAzDXeMuQFNmNpV4
- slot 445508680 · hash HL5Pxv4GKEwr6KFCT38pbSqL2dx48JrHY2kBUot6yuLw
- slot 443524596 · hash BeYebkurxazghAdyhYGFom2uVGC6EcPBr2FTQ5owBNbB
- slot 443524588 · hash BP6MrdgDckwaGNNvb5u6U1q27KKMQmXx6TjRJ3M1JscK
- slot 443501016 · hash 4xp3zXwddBy7QLGnKZdSdsQwDQmH81TBkrNRmbMAWpB8
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 17 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 7/22/2026, 2:11:17 AM
last updated: 10/10/2026, 6:50:07 PM
4 viewsavoid.net — verified advice for a post-truth world