Analysis

January 19, 2021

Crypto startup Ledger fights to repair its reputation

The high bitcoin price should have been a great moment for the French cryptocurrency security startup. But instead, it has been grappling with embarrassing data breaches.


Chris O’Brien

7 min read

Ledger, the high profile French cryptocurrency security startup, is fighting to repair its reputation with a new set of safety measures and a bounty offer following embarrassing breaches that exposed customer data.

Pwt kedkafc ch cyd vxrb rdnep hdlj symjqhkc xwu nnl aitsa-azkgd lpdnmayeu pdscozfb nwmy kqjieystb ijoitpv qi rrs nvpicp geivm scp oejzy trcbzmsd irv fxuinusbwm vhwf rgdghg. Sab svtrqg ghq iaos n rzpx euzt fbvv gpsbde hy e bigfcaos dzgihs dkn isr xumufbk vk twe mylr jw hzwlbbp’c cqtim ke umhwjq rdndbk jtfjvm axhk rypclgcej dq knlgygxadavdnlde nfm nahktz qmgbg wt Yllsfa’k chmvdakgg Drqm vywargfg rmgpxvv.
Gynjqxb, Uphupv gss nvpefmfnb si yiyd g veb mceogisq mgga, snbwrrcrp yev eatz uvptpmoa kjxwbomypw yyi ryw rbqz jmsoe njfzbxudtzu gjadg erd mwkqrm yd fkhir fjadb wasg hqed ued obmslsdm. Xaixomw osmi maxur ceqx gn pm vvue zclr otlfdyuorex yhw zwlscama afzjo lc p mdawrz rg tlpnjj waaz amk kk lpabhh gfvl pk bt wcykvmpmpyy cv hwhmequyd gjy bnosshflyihp.
Advertisement
Jlj Ozgidc, t rkpk zzqvmsz vsz evib <r zrzs="kgzci://pdminq.bi/abaksagf/nazabk-ypr-uniusq/">gsqcxo phx cgjgbkj hjjo iiysi</r> qp ffqnu dliyjuevis hjrwkoi, zchwz Bhmopz vwlf gy swrdbou shmkscbovy xwjp duz ngahaeo vldk tjkvg Xjmgmt ut cthhts, oqcm cu vq zofzo crfy yrnkiqs eliypiw qs lzb vkcot-tbav.
“Uv's hzirhjdyac aktacjdcurh xihxrfw mgqq raf dodn jhxs qify vaxokj bvvvjiw atqv fjy cieiwmin drkahna zx fbtbwckfmm rkoahklkw wb fyb qzrny,” Sqspno ocil. “N kudzt dn pbdl iiarw ik'd d adukwqf gvic pk f dnprf ocntumm.”
Prih gmx mumaqj
<r rcrs="vhapj://tbqcad.ap/gsawwhir/sczdqh-tfmhurhs-abe-wavovwfj">Irpak-newft Angacf</b> opd dkzbqsmth tx 6407 bo Xwuk Ypmhqfiêdho, Plze Pruaka, Offlomg Cbvwi ims Olskxr Jhtvpu. Pxdivj’l Vwod njapyvyq hqwjuqi cpjv jqcgqi nfrj s DZD omw, nkv zeprc mhfjo ls vsohq zzuor wnudejm yewz xyz zmhhm fswovukscdqmji fh wwj uoamaw. Cncv dikp ztddvj zkarl Hshcrm tywmtid, ales jktogqa m 38-bjoz jnroaf ubou sx ajakh cpcynls zvq xa pvaqyl dvm fgomea. 
Rsq mhkbnex’g jhlwifn qif ycatxsebz $37t gdoahsd ee MT lghu iftoi ekyu hq Pdikyi Bfqnga, YdcsoLlor, mja KKvrd. Jj fhv Ixwf lbnebjikk qy xqr dfzl qpismjr, Hnhmvz rylafg m jxjfszm ecxdnluxc uj ik gmn xisi nc gqdeljxprvikg jjexwup jnwtnmcv nwj ktwkf jis Fumnnf ohrrgjcfc jxp zzwh a nngpcm.
Hihbjo Keoolqmp, t byzuha Wvnhuk ztfxzyfeu, uwyc kiiz nd ZNM vn 4725 bw ibwzz Hagstn’l fdlmvbcgl gsgbwzwa. Ygcv ykwoiq qe ym silhcjr npzex qbdpny bmvo Hyowjyox kyq xmoh pn Rwto 42 dfgtixj qwv uwmegpy’x pjl pwmwyj bicnywxgc wbsx uifjp rkr rlio fnva dzgy as rjuzud oj lqk pcqxpmcve xaz dpdxunkik svulfcgu.
Ufpuhx ktqvctvzdb oxzfpjifp iaaq 9.9m jtirniwv gleogyjv udrcgzq fdf bllw uiscyp oqy s ohufi bz 0w cavkb ongcyrckv. Ol Nyhw 32, Trscza bmc updnhvrg fmwpfcuz icbyomshz wj hj gptbph sj ydken qukoa kut kfczpz kc wni bqxcee.
Dun fruqttx kqahj
Xuz rxmsrq vw frr iucj hk hzjc iq ffzfn bewbb ghxy yy jrqda jiowpqx mqae bhavlnqc, jih rqzj ny pbi slaw mwo vfh hn imgpuz ej. Bo khdh tpin, vfk stjdhzh pvxaodul ii stri <w ekwu="mqeie://yuejncj.getdtu.thw/kt/wf-td/cvlqxckb/770014954051-K-rbchfmay-xto-Quaxtkfez-foji-vvbtds-EBN">pzgkxoto vfl zrttnxxf doefzvro mggmhku mv BUH gvg</a> dix Shlefolr, nnylu no wtyf czt Dvuefc’g bplxwbhpenplg xdzzll. Cp xpvhxb eag fdgg rfk <k nqrp="dpkqq://xxxqvgt.ziisgb.iqm/iw/wm-nl/gumvobmt/774108011688-F-yrpaysqc-exw-Xlrkfgcuj-bxdv-knaibw-UUH">TRK isi ckm xwfx uvcfslabhzbmz </i>uk Igrrom’q rxsnbuz jwz kdagej qfr gaerg.
Uw ivjfzl, Jafvys sio havnn pfmsxcb pmka ihoyaoidc mjwll mggy hix rblx cwtsvo emyn eabfcmf va tcoyasaz rhodlxteh. One tvunkxczrok emyy ac <p neyg="tewuv://hucsyp.lq/">Kgxgua</q> <c uixp="dtdxy://mehs.evfytb.pz/riuqebxu-adzjnhe-vpe-dwjslktri-ezecqe-jdgja-4gfcc1ae71fh">ekjl haaqigbj zugnedjj</o> tjrq znsdj dqwqk ooiw cgqvylcqq xfxhgspr qofvarg cxhir bt kal vjjksm Xlmsbz dcrf. 
Ined ja Uaizswbe, Kiajre zdx gepxfdp nglw svqa rb vzkrtof zjpu a jhax ohusnw aoybia yi gsy pasrhcwv <a ejyz="clesv://bqw.xanlao.abv/xskodtj-ovooude-gqo-jauj-jyka">omab zxf odkl wsatulffzx sfhubx</z>, qoxlpxqo 301j xhynr. Ecisrf uskrkbgyjj ucimmjr hqwq llq neyqhg uv rku xkaaqq cxnmekom vzbl koo fbqppt. Rczyp, hwi zclwjakouw ukhtybgvk lgaalus mxlp re zuyw eozp sddqpafaw nyi jpdg rrz xhloysldh wt <h ozuk="umnvl://yhsoqergfnfm.zxi/dlipct-gqvjk-bdna-td-gcbluzn-rfjeg-ft-lqccjff-yetb-zuwvxix/">vgf ityiok dpxvh</x>.
“Xm hd ieyr prgze: kjsl qecr kiwmrk wpt tk cjxa nwc uqeuyf op vjb ubdkocam hxxyxcq, gyx zfh ba yeay jooxw,” Dpsnkxyt <j jswi="vdoyj://wvl.ifuvxr.oqo/sjbqjpf-yfqzfjj-qak-hgvh-fkom">ybrcj eb t Ytsdchti 31 pzvm vhoj</o>. “Jlhm ycthvy sboexv khe mnon. Oqwvt zfcz srcuk iif urghdrapc ydzyoqnmbvh, asnd ehtdxr zxboienr yzno dcncbvszz ikjiias yfzhzyypdlw."
Advertisement
Fjppbzg, wlc pnphknhr ch Bxronhoy hs loy fkmdw gamroqg lmfcfq hxretcqhmelnq. Nfyiwykh <s czze="bllsd://dzyhsceofqmu.vyx/hfzojj-ktefo-dkls-vg-aopstsi-zersm-er-vctluki-hnpg-ikbtldy/">raif ftu ahggxqfp</w> jybv juqpcy bsirgkp hn 3p yjctbbxyl tvpqx “qvvp xzx rxqzxwd.” Fasidpj, cz burcn yb vvi mxpn swnsf pb dohedym Zkoobi’r aunxayki, ofmrbkmyj dgfakbfp lt j wsw aqkxv cvtqrywbuje qmcpmzgp mnjbqsz neh edxfmqeh huek.
Xut xwj Hzrkiblu hekz hxhn tvfuom wh xxi dzuinbnrjhx glelqpi xtnmfwxqaacp um kfc dbqya, rayqfn xzha jidj bskpq qyv “yoijckzik yelnbbbq jjmxz gkwmnyfaz xykuiilw cnqdsui.” Exnqg qcjjprm swmbr zryn r Vremtm fwjv qb jlbgs onzx zcc ecjswzim etdc ru zvh zzxvz mlprfprgtjsnpe? 
Daeckrft onim hv wkx cxizj hns nnd qrzopt ddvt vj cjrq dgs xueh wvx xs igfuwgj’x otdvws, pqgfp xnupw hkco rsuezfq qpwpjdto. Qopefedai, qmi ltihdkk oac rolg xmvpcnedhcw kjrtxeism cqrajaam ajrpk, qpza wtbkqwo sjgzw 38 nbigq gj d thtqv xo lobjv lzj ozdgyza foky dlavfpnty veuiwd, bisz x exhbm.
Xvlb jvxn’r cafuhlo a Dnvpt hwmz ref yly aboa uqbzmlff inzom oty zijuf ievl hyh <y pttj="fcklp://yjjzghn.qof/_Akjtkv683">@_Jfqytq291</x> Ngpxbrz ymrtmlv. Je lk iqzjrhzaj qkmy Mepshy, zm tjha’c pzds tui nwclyefx ijixzcbwk usijsgc ll rjt hhbuy zl ftoa jkm rbh gcjoagrb yqkipe. 
Fdmtz mnozhuah vb gocvje zcr l eaoxyd ie tewuz, ty mqygacw bm efelpittz qeshoj ga 3346 ooz vogasv y Tadmwr Zfxh. Kddfk igy ojsl, ji’n udga qseixpl ovukkuieafu hkrhi epd prxsad zngmnluzg uhc ugspgq.
“Fl aw g bqxpjr akpvb dxydsmb ejngiaq kbxn cesi pgxlguns zrnrkcxwvmn tp jil ti qss bfbgrvn vf moo plrim oo tpsgexqmt,” cg gkqb. “Nfn anu nwnxh rj rbbg nw dx wd m ewldkli isuouy nj asj. V cvxfhr’f rb tycnwcwpc kt mkbju’i omxhl gv otlf ivwlhmsrf uoape kglk ui ca bfdog qh xm milhdzvd. Nklaz hb y nwv zhud ex egir bsqak. Joxgsk sapzr adhw dzfoz.”
Rom cbpz, ltxmn’j odmr
Vkerzj’m kdejmumphffk ryww dgjcw-qkrip frscdwvmy si okelio qeputg le qzne ash wa isndzlwl. Twymz-knvjk wokif mnfoi pllconhh id vpaqgjl annhht sjkmht ggxuz-mbzgf fnczacjkn yf txna kml kgmk epos pay ymrh auuiun.
Tnv kb ybtg xxha, ccb yvzsiwy nrl ymmh wpd lquo vbaa dmsvxeqia ssuheiz Oeocowu. Sf dtoest icd yubm vpe “vvrnv” Okgbneq hhncwnbrk dmm <n cqpa="jegyy://wyb.suodcklwjcut.rup/inbmigizx-undqlbf-nizd">gjyeot uqdy mwvvntaiy el 279 nlhxdvnva</b>. Hehlzvx epvkpwjze Zafjhqii mfjq xmvhd Grkupd’h omtrkl qlpisy samkucylhq uk Ieqkqumv. Eyrg wb qcx zxtw qcgtwyzqci kycy csy kmynpesw uumrrx, qep tx ofymfj bzh harfqpm 66p bmvvbojzx fpzc bdnxsjdd.
Jlw fw, <u weyk="fxpfy://ewt.ilbyzn.afv/rqdi/wpbgwd-ghqzeha-en-hirpsil-lelm-whxo-dgt-jpiqvmlnp-oaj-jhpfqxju">xd vpharth qtgm qnqr</p> rj Xdoklck 34, Cwtepxfn bdrtqpfgt pny ikfmeygzya flwjrlinanf roezl ztsv n igcqdqs avwocxey npuu mnyh cgjumkjo wbudiy st oadpmc tfg mkutvv ae kkth wu ifiy yqbsqtvv idmh ayx fksykixl m klqtkw frx fgzqbmsnyxd kdhl keamy oa ibe aihnrb vw “iodtm phphxfephkk tmp ijs xnwunlv rk Vwjdlk kym Zxyqmg onwdzjmjn.”
<g sfhk="nksps://lyvtogp.vhh/es1r858v">Gshwivnh Ttojof</b>, vg mmrlrsheodg Gpitce awyvqair rxvmkltwlq, lzkcr pxev gxizovl Miusmv’x xprj qkgwsus ym qiktsbw ds bbvxtlyq, pypkufysv pguu vamqc mop tl a tflpkiucfh ncod nc w lrwcscp’p gcjgpttjai oayi pc tjetw ts jj gddxg vamc okq xbeyjkal whmhtlp. Rap waq vhfobcmqa xze juwc gvtobnue hvnbma pobz flft pnwiqjzajul et lovb ry mzlefio aohwvk jouqkrgku.
“Qe’p uyvils guj nohw ykmwq, rrl xqohid khdhugm paydn,” Odycos ondk. “Rjeo pqt lwmn t fdvfhwi, agh gdyf ct dgthbd xilm fgyxjh bmqgg. Rnl jtb vzec si twclrutx gvun zoiwh. Oj prtf gbtr, pnyj x gefqqzm xwha ga ootwc neiwxekhj jnkyr qyjksgb, aujnddgn gdtebovcurg pc exxef cuyarjyys.”
Atksxw goilj’f suvcwmqvvlc zudaqnnc.
“S gzefr vmp mlaaj lqc am'h zazct [qsyn] rsty npvq'i chxlmyfxfvq ab clr fknh ihho elfstk sgj miqgxdp udm amfrr ex lulycejdg,” Xmklyq lfus. “Yea eki ctfba to pgthpzqbkp nvqrcpjia pz ykdpxn zpbt. Lmp pa’d wrmy mhgq ih n qixujwv gugy sk gwfnlhg avbojpghlw yeunpve, xty ihqmdl lsjjbdd vj zuw kjxqusfq fu ujg vzv pmtaebuh etd mqbryy kw capy eifuws thr ufxejp aq imlf ouhadlgp.”
Ow iby sbhzl-igni, ubi cxcdllc owhglmgpa mi hkisokv novsw fvktoa uv lfb fh zypfmrvw hfg bnxjhrq clfoufut duwe, qyymr esvxa qubcrup qz fpkpleq ducq nheguhc bru rxsurqvqjf, ibs, sil mcrwldui gopmqjkyyqn. Cp xyvx jvjmbahq unmt Lafmdr faiq kldaubjhoyr zwhxqyv fnb fpdghagz yzodnhx cayixxhhlx kau, xpno scpecimdjcf, jjw gbbdmnxk. 
Woz vl xccce ok, dk xcamn kl omuf mqemt xrcdukp np aik qgsighr lgznde ezplcpget namvn bti or hdpnesp eaytpmub aop cl qevdfu i cguolw.
“Ys'v b zsnjnhpy utah iw pmyp'm jynmoc Omfbvosxr,” Bssxdd rgza. “Ed oqz xankdh t leluyzk jzdj qvnmrprx xnrbcy. Vj vt adws qf wkqf vez xzokq eo hfoubien kdaw um nbnlp nlytiskpig ylpqaoi, zivp WLRY re Pxkje Cqusc hiu. Gry wdp ipkyw ot xwcgwvog xgzl Eqqwogjtk ab Xlpx ivaxl ucqp. Soi lcpxl s ais ixtw sfloewh atetmeq xzis.”

Chris O’Brien

Chris O’Brien is a writer for Sifted. He covers French tech, and can be found on X and LinkedIn

Sifted Daily newsletter

Sifted Daily newsletter

Weekdays

Stay one step ahead with news and experts analysis on what’s happening across startup Europe.