A fake Ledger app listed on the Apple App Store has been linked to a coordinated crypto theft that drained approximately $9.5 million from more than 50 users in under a week. The incident highlights how a single malicious listing can bypass user caution when distributed through a trusted platform.

The attack appears to have taken place between April 7 and April 13, with victims unknowingly entering their wallet recovery phrases into the fraudulent interface. Once exposed, attackers gained full control of funds stored across multiple blockchain networks.

How the phishing operation worked

The scheme relied on impersonating Ledger Live, the official software used to manage hardware wallets from Ledger. Users downloading the fake Ledger app were prompted to input their seed phrase. These critical security credentials, however, should never be shared or entered outside secure device workflows.

Once entered, attackers could immediately access and transfer funds. Reports indicate losses spanning Bitcoin, Ethereum-compatible assets, Tron, Solana, and XRP. The pattern suggests a broad and automated draining operation rather than isolated incidents.

One widely cited case involved musician Garrett Dutton, who reported losing 5.9 BTC after installing the malicious app. His experience became a public example of how even long-term holders can be compromised when trust is misplaced at the distribution level.

KuCoin flows raise laundering questions

Blockchain analysis shared by ZachXBT indicates that the attackers routed stolen funds through more than 150 deposit addresses associated with KuCoin. Reports describe these flows as part of a laundering process tied to the theft, bringing attention to how illicit funds can move through centralized exchange infrastructure.

There is no public evidence that KuCoin knowingly facilitated the activity. The findings are based on address tracing, which does not on its own establish intent or direct involvement. However, the scale of the flows has renewed focus on transaction monitoring and compliance controls across exchanges.

Platform trust under scrutiny

The incident places renewed pressure on Apple’s App Store review process. The presence of a fake Ledger app on a tightly controlled marketplace challenges the assumption that official app stores provide a baseline level of security.

For many users, especially those new to crypto, app store availability often equals implicit verification. This case demonstrates that attackers continue to exploit that trust layer. Phishing tactics are shifting away from obvious scam websites toward more credible distribution channels.

Ledger has reiterated that users should only download Ledger Live from its official website. Further, never enter recovery phrases into any app interface. The company maintains that its hardware devices remain secure when used correctly. Sadly, the seed phrase exposure remains the primary attack vector in such incidents.

Security risks extend beyond crypto-native platforms

The fake Ledger app case underscores a broader issue in crypto security: user protection often depends on behaviors outside the blockchain itself. While wallet technology may be robust, weak points emerge when users interact with third-party platforms or compromised software environments.

The scale and speed of the theft suggest a well-organized campaign that capitalized on both technical execution and user trust. It also reinforces a recurring pattern where attackers target onboarding friction points rather than attempting to break underlying cryptographic systems.

>>> Related: Ledger and Trezor Seed Phrase Mail Scam

What comes next

The full scope of the operation is still being assessed, and it remains unclear whether additional victims will come forward. Questions also remain about how long the malicious app was live and whether safeguards failed during the review process.

As the fake Ledger app incident continues to unfold, it is likely to intensify scrutiny on both app store governance and exchange-level monitoring. For users, the takeaway is more immediate. It illustrates that even trusted platforms do not eliminate the need for strict self-custody practices and verification of software sources.

The episode may not change how blockchains operate, but it directly affects how users interact with them. That makes it a practical security story, not just a technical one.

The post Crypto Users Lose $9.5M to Fake Ledger App on Apple Store appeared first on CrispyBull.

A seed phrase phishing scam is targeting Ledger and Trezor hardware wallet owners through professionally printed letters sent to their homes. The letters impersonate official security notices and instruct recipients to “verify” their wallets by scanning a QR code or visiting a website.

Security researchers say the operation is a targeted phishing attack extracting recovery phrases from unsuspecting hardware wallet owners. Once the user enters the seed phrase on a fraudulent site, attackers can immediately access and drain the associated crypto wallet.

How the Scam Works

Victims report receiving a phishing letter that appears to reference a recent Ledger security update. The document includes company logos, formal language, and a reference number to create legitimacy.

The letter directs users to a website that closely resembles an official support page. There, recipients are prompted to complete what is presented as a mandatory verification process. In reality, scammers are phishing for seed phrases. Entering the recovery phrase grants full control of the wallet to the attacker.

Reports describe similar tactics used in a parallel phishing scam targeting Trezor users. In both cases, the hardware devices themselves remain uncompromised. The attack relies entirely on social engineering.

Link to Past Data Leaks

The mail campaign has renewed attention on a 2020 Ledger data breach, which exposed customer contact information, including physical addresses. Although the breach did not compromise private keys or recovery phrases, the leaked data created a long-term targeting risk.

By using postal mail instead of email, attackers increase credibility and bypass common digital spam filters. The approach suggests that previously leaked customer data is being repurposed for highly targeted fraud attempts.

There is no indication that the current campaign involves a new breach. Instead, the scam appears to leverage historical data to identify potential victims.

>>> Related: Ledger Data Breach Linked to Third-Party Global-e Incident

Broader Security Context

Phishing attempts targeting crypto users have evolved across multiple channels. Email campaigns, social media impersonation, and now physical mail have all been used to trick users into revealing sensitive information.

Hardware wallet providers consistently state that they will never request a recovery phrase through email, phone, or postal correspondence. The security model of hardware wallets depends on keeping the seed phrase offline and private at all times.

User Warning

Users should ignore unsolicited letters requesting wallet verification or security updates. This mail-based scam targeting Ledger and Trezor users succeeds only when someone enters their seed phrase on a fraudulent website.

Anyone who receives suspicious correspondence should verify announcements directly through official company websites. Protecting your recovery phrase remains the single most important defense against wallet compromise.

The post Ledger and Trezor Seed Phrase Scam Targets Users Through Mail Campaign appeared first on CrispyBull.

• Ledger IPO plans have advanced from a strategic question into an active capital-raising review. The company is now weighing public markets alongside private funding as viable options.
• Recent reporting points to adviser involvement and valuation discussions, but no SEC filing or firm commitment has been disclosed.

The idea of Ledger IPO plans is not new. As early as November 2025, the crypto hardware wallet firm Ledger publicly acknowledged that a future listing was one of several strategic options under consideration. At the time, comments made by CEO Pascal Gauthier to the Financial Times and Sifted framed the discussion around long-term positioning rather than an active transaction.

What has changed since then is not the underlying logic, but the process now underway to determine how Ledger raises its next round of capital.

Recent reporting, led by the Financial Times and cited across multiple outlets, indicates that this evaluation has progressed from a conceptual discussion to a structured analysis. Seemingly, public markets are now treated as a viable funding route rather than a distant possibility.

November 2025: a strategic question, not a capital process

When the conversation on Ledger’s potential IPO plans surfaced last autumn, it was framed as a strategic consideration. Ledger had reached meaningful scale, with revenue in the hundreds of millions of dollars, according to comments made by Gauthier to the Financial Times. The company had also expanded beyond consumer hardware into enterprise-grade security and custody services.

However, the reporting at the time did not describe an active capital-raising process. It did not include the names of advisers. The valuation range was not discussed. No listing venue was identified. The coverage reflected strategic framing rather than execution planning.

Capital needs come first

Ledger is reviewing how to raise capital for its next stage of growth. This assessment involves weighing private funding against public markets, rather than committing to a single route from the outset.

At this stage, companies often engage external advisers to test multiple scenarios. They model valuations and assess market appetite. They review regulatory and jurisdictional implications. These steps do not require a firm decision to list. However, they do elevate an IPO from a theoretical option to a practical one.

What changed since then

According to Financial Times reporting published in January, Ledger is now working with major investment banks, including Goldman Sachs, Jefferies, and Barclays, as part of this evaluation. The same reporting cites people familiar with the matter as saying that discussions have included valuation scenarios exceeding $4 billion and a potential U.S. listing.

A Ledger US IPO would bring significant regulatory and disclosure requirements. The fact that these elements are now being actively assessed suggests that Ledger’s IPO plans have advanced within a broader decision process to raise capital. Ledger declined to comment publicly on the reporting.

Where the process stands today

Active evaluation, however, does not necessarily equate to commitment. There is no public evidence that Ledger filed an S-1 with the SEC, either public or confidential, despite ongoing IPO discussions. The company has yet to announce any transaction and a corresponding timeline.

While other crypto firms have previously pursued confidential filings ahead of potential listings, no such step has been reported for Ledger. Monitoring SEC filings remains the clearest way to confirm escalation beyond the current stage. A Ledger public listing remains one possible outcome, not a confirmed plan.

>>> Read more: Kraken Filed Confidential S-1 seeking $20B IPO

Valuation and positioning

The repeated reference to a multi-billion-dollar range introduces the first concrete benchmark. An IPO valuation at that level reflects the Ledger’s scale, revenue base, and relevance within crypto security infrastructure. It also places the firm among the larger potential crypto-related listings currently under evaluation in U.S. markets.

These figures are indicative rather than final. They signal that advisers are testing financial models against public-market comparables as part of a wider capital review.

Why this matters now

The importance of the current reporting lies in its specificity and sourcing. Named advisers, valuation ranges, and venue discussions typically appear only once capital strategy moves from abstract debate to structured assessment.

At the same time, the reliance on anonymous sources and the absence of formal filings underline the provisional nature of the process. Ledger IPO preparation is visible as part of a broader capital decision, not as confirmation of an outcome.

>>> Read more: BitGo public listing completes at $18 as crypto IPO discipline holds

What to watch next

Confirmation of a confidential filing or clearer guidance on timing would indicate that the public route has been selected. Continued silence, or the announcement of a new private funding round, would point in the opposite direction.

For now, the story reflects evolution rather than inevitability. Ledger IPO plans have progressed from a strategic question into one option within an active capital-raising process, with public markets now firmly under consideration.

The post Ledger Engages Top Banks in Evolving IPO Discussions appeared first on CrispyBull.

• Ledger confirmed a data breach linked to a security incident at third-party e-commerce provider Global-e.
• Customer contact and order-related data may have been exposed. Ledger says no payment details, private keys, or recovery phrases were compromised.
• The main risk for affected users is phishing and social engineering, as exposed contact data can be used to craft targeted scam messages.

Ledger has confirmed a data breach after a security incident at one of its third-party service providers, Global-e, exposed some customer information. The company said the incident did not affect its hardware wallets, private keys, or recovery phrases. However, it warned customers to remain alert for phishing attempts following the disclosure.

According to Ledger, the incident originated from unauthorized access within the infrastructure of Global-e, a commerce and checkout provider for Ledger’s online store. Ledger said it was notified after Global-e identified unusual activity and launched an internal investigation.

Third-party breach, not a wallet compromise

Ledger emphasized that this third-party breach involved only systems operated by Global-e. It did not extend to Ledger’s own wallet software or hardware products. The company said Global-e handles certain order-processing and e-commerce functions but has no access to wallet credentials or cryptographic secrets.

The issue became widely known after customers began sharing breach notifications online, prompting blockchain investigator ZachXBT to flag the incident publicly. Ledger later confirmed the reports and reiterated that the breach stemmed from a third-party environment rather than its self-custody infrastructure.

What data may have been exposed

Ledger said the Global-e data breach may have exposed customer contact and order-related information linked to purchases made through its online store. The company did not publish a definitive list of affected fields, but confirmed that it involved some customers’ personal data.

Based on notifications shared by users, the exposed details may include names, email addresses, phone numbers, shipping addresses, and order information. Ledger stated that the incident did not compromise payment card details.

The company has not disclosed how many customers were affected. Investigations into the scope of the exposure remain ongoing. As a result, Ledger customer data exposed through the incident may vary depending on individual order histories and regions.

What was not affected

Ledger stressed that the Ledger data breach did not compromise wallet security in any form. The company said that recovery phrases, private keys, wallet balances, and transaction capabilities remain fully secure.

Ledger also reiterated that Global-e does not store or process sensitive wallet-related information. As a result, the incident does not provide attackers with direct access to users’ crypto assets.

The company sought to clearly distinguish the event from a wallet hack. The breach involved only customer information handled within an external e-commerce system.

Phishing and social engineering risk

While no wallets were compromised, Ledger warned that the exposed data could increase Ledger phishing risk for affected users. Scammers can use contact and order information to craft convincing scam messages that impersonate customer support or reference real purchases, particularly when Ledger customer data exposed includes verified order details.

Ledger advised customers to remain cautious of unsolicited emails, messages, or calls claiming to be from Ledger. The company reiterated that it will never ask users to share recovery phrases or private keys. It urged customers to verify communications through official channels only.

Broader implications of vendor exposure

The incident highlights a broader issue facing the industry: even when core wallet technology remains secure, surrounding commercial infrastructure can introduce vulnerabilities. While this was not a hardware wallet data breach, it still illustrates how customer-facing systems such as payments, fulfillment, and support may present different risk profiles than protocol-level security.

From a structural perspective, the Ledger third-party breach reflects the growing complexity of crypto companies that operate hybrid models combining self-custody products with centralized retail and logistics stacks. In such setups, third-party vendor risk can emerge outside the core security perimeter users typically associate with hardware wallets.

>>> Read more: Ledger IPO: Why a New York Listing Makes Sense

Reputational impact and open questions

Although Ledger maintains that the data breach did not affect its products, repeated third-party incidents continue to raise questions about operational dependencies and oversight. The company said it is working with Global-e to assess the incident and monitor for any further developments.

Several questions remain unanswered. That includes the precise timeline of the unauthorized access, the total number of impacted customers, and whether it may require additional disclosures. Ledger said it will provide updates if new information becomes available.

For now, the company’s message remains consistent: the Ledger data breach did not compromise wallets or funds. Customers should stay vigilant, as exposed contact information can still be exploited through social engineering attacks.

The post Ledger Data Breach Linked to Third-Party Global-e Incident appeared first on CrispyBull.

The company has not confirmed any such plans, and no filing has been made with the U.S. Securities and Exchange Commission. Still, the reports, based on leaks to the Financial Times, have sparked discussion about whether an IPO is likely and why it would make strategic sense at this stage of the market cycle.

Crypto Security Demand Has Never Been Higher

A Ledger IPO would come at a time when crypto security is once again at the center of investor attention. In 2025 alone, global crypto thefts have exceeded $22 billion, pushing both retail and institutional users toward secure self-custody options.

Ledger’s crypto hardware wallet lineup has become the industry standard, with the Nano X and Stax models seeing record sales. The company has also broadened its ecosystem through Ledger Live. This software platform enables direct token management and staking from within the device. Combined, these elements make Ledger one of the few profitable infrastructure players in a still-volatile crypto industry.

Why a Ledger IPO Would Make Sense

Even if the current reports are speculative, the timing of a Ledger IPO would be logical. The crypto market has stabilized after a prolonged bear phase, and institutional investors are returning to digital assets as an emerging asset class.

Listing in the United States would give Ledger access to deeper capital markets and stronger liquidity compared to European exchanges. It would also align the company with global peers like Coinbase and Robinhood, which have shown that crypto-related equities can perform when markets recover.

From a branding perspective, a New York listing would signal maturity, transforming Ledger from a private tech brand into a public market leader. For a European firm, that’s a major credibility leap in front of investors, regulators, and enterprise clients.

Fundraising Remains a Viable Alternative

Still, is Ledger going public? For now, the company appears to be keeping its options open. Sources suggest that Ledger management is also considering a fundraising round, potentially bringing in new private investors before any IPO decision is made.

Private financing would allow Ledger to maintain strategic flexibility and avoid the heavy disclosure requirements and market scrutiny that come with a public listing. Depending on market conditions, this hybrid approach, raising capital first, listing later, might offer the best of both worlds.

Possible Valuation and Timeline

Reports referencing the Financial Times mention a potential IPO valuation of around $3 billion, based on Ledger’s recent revenue growth and profitability metrics. That figure would place Ledger among the top-valued blockchain infrastructure companies in Europe.

Industry insiders have also circulated Ledger IPO 2026 rumors, but no official roadmap or timeline has been confirmed. Given the company’s past capital raises, most recently a $380 million Series C in 2021, any move to public markets would likely follow further revenue expansion or a new product cycle.

Challenges Ahead

A Ledger IPO would not come without risk. The SEC’s regulatory climate toward crypto companies remains unpredictable, and any offering would require careful structuring to meet compliance standards. Moreover, public markets demand transparency and quarterly performance updates. Such factors can constrain innovation cycles for a hardware and software company operating in a fast-moving industry.

However, Ledger’s strong balance sheet, recurring revenues, and diversified product mix could offset those pressures. Investors increasingly view crypto security companies as essential infrastructure rather than speculative bets.

>>> Read more: ConsenSys IPO: What 2026 Means for MetaMask & Ethereum

Bottom Line

The speculation around a Ledger IPO may still be just that, speculation. But the reasoning behind it is sound. Ledger is profitable, globally recognized, and positioned at the intersection of security, hardware, and decentralized finance.

Whether through a New York listing or a new fundraising round, the company’s next move will likely reinforce its status as a leading crypto security brand in a market rediscovering its appetite for trusted infrastructure.

Even if an IPO doesn’t materialize soon, the fact that such a move is being discussed at all shows how far the crypto industry has come since its post-2022 downturn.

The post Is Ledger Preparing for an IPO? Here’s Why It Would Make Sense appeared first on CrispyBull.

Pascal Gauthier, the CEO of Ledger, addressed the audience at Blockchain Life 2023, delving into the puzzling discrepancy between the widespread adoption of cryptocurrencies and the comparatively low usage of hardware wallets, such as Ledger’s. Despite the growing interest in crypto, Ledger’s user base stands at 5 million, a mere 1% of the market.

Self-Custody’s Significance

Gauthier emphasized the importance of self-custody in the crypto space and expressed concern over the current centralized market, revealing that most of the 500 million crypto users are on exchanges rather than utilizing self-custody solutions. He urged the audience to consider the fundamental purpose of crypto – to be a decentralized and self-custodial peer-to-peer payment network.

Market Insights

Breaking down the numbers, Gauthier highlighted that Ledger protects 20% of all cryptocurrencies and 35% of all NFTs, serving around 5 million customers. However, he acknowledged the difficulty in accurately gauging user numbers due to the challenges of conducting business intelligence on blockchain.

Centralization Challenges

The Ledger CEO addressed the need for the industry to tackle the centralization issue and promote self-custody, stressing that the forthcoming influx of users, potentially driven by the rise of ETFs, poses a significant challenge. He urged the industry to solve the user experience (UX) and user interface (UI) problems associated with self-custody.

Vision for the Future

The talk shifted towards Ledger’s vision for the future, emphasizing a shift from technology-centric to product and experience-focused solutions. Gauthier argued that the industry, largely shaped by developers, needs to prioritize designing products and experiences that make technology subordinate. He pointed out that current technologies like account abstraction and MPC are important but stressed that they are not products.

Join Blockchain Life 2024 – Dubai

Ledger’s Efforts

Gauthier shared Ledger’s efforts in this direction, offering Ledger.com as a platform to purchase self-custodial devices. He discussed the need for a radical change in UX/UI, particularly in the on-boarding phase. He cited the challenge of convincing users to embrace self-custody, attributing it to trust issues related to handling 24 words.

Addressing Challenges

The Ledger CEO hinted at Ledger’s new offering, Ledger Recover, as a solution to the 24 words problem. He acknowledged that the industry needs to collectively address this challenge to facilitate the on-boarding of millions of users into self-custody.

In conclusion, Gauthier stressed the importance of making self-custody a seamless part of users’ everyday lives, envisioning a future where securing digital assets is intuitive, easy, and integral to users’ digital experiences. As the industry anticipates potential mass adoption with the advent of ETFs, addressing UX/UI challenges and building trust in self-custody remain key priorities for Ledger and the crypto community at large.

The post Ledger CEO Pascal Gauthier Explores Challenges and Future of Crypto Self-Custody appeared first on CrispyBull.

Breaking news exposes a staggering breach in the Ledger ConnectKit Library, a crucial component in the fortress of crypto wallets, has fallen victim to a security flaw, potentially putting users’ assets at risk. Let’s delve into the details of this development and explore steps to ensure the safety of your crypto holdings.

Understanding the Ledger Library Flaw

The Ledger Library, a backbone for many cryptocurrency hardware wallets, recently faced a security breach that allowed malicious actors to inject code into decentralized applications (dapps). This flaw has raised concerns about the safety of digital assets, emphasizing the need for heightened vigilance among crypto users.

The Impact on Decentralized Applications

The compromised Ledger Library has ramifications for various decentralized applications, affecting projects like SushiSwap and Revoke.cash. This security lapse enabled hackers to execute a wallet drainer, posing a risk to users’ funds. Reports suggest that substantial amounts, including $484,000 in assets, were pilfered, underscoring the urgency of addressing this issue promptly.

Ledger’s Response and Mitigation Efforts

In response to the security breach, Ledger has taken swift action by identifying and removing the malicious version of the Ledger Connect Kit. The company has urged users to refrain from interacting with dapps temporarily. Ledger assures its user base that the security of Ledger devices and Ledger Live remains intact, emphasizing their commitment to resolving the issue promptly.

Implications for Crypto Safety

This incident underscores the broader concern of crypto safety. As the crypto space continues to evolve, it becomes crucial for users to stay informed about potential vulnerabilities and exercise caution when engaging with decentralized applications. The Ledger Library flaw serves as a stark reminder of the persistent threats posed by hackers in the crypto sphere.

Advice for Crypto Enthusiasts

In light of these developments, cryptocurrency enthusiasts should pause their interactions with dapps until the affected projects confirm the mitigation of the attack. Understanding the backend libraries used by dapps is essential, and users should exercise patience before resuming their activities, even after Ledger addresses the security lapse.

This Ledger Library flaw has cast a spotlight on the importance of robust cybersecurity measures in the cryptocurrency space. As crypto enthusiasts, staying informed and implementing best practices for securing digital assets is paramount. By remaining vigilant and adhering to recommended precautions, users can navigate the evolving crypto landscape with confidence.

The post Alert – Ledger Library Security Breach appeared first on CrispyBull.