Home
/
Security measures
/
Wallet security
/

Ledger donjon: how white hats are defending hardware security

Ledger Donjon: White Hats Trailblazing Hardware Security Amid Controversy | Struggles for Trust Persist

By

Emma Schneider

Feb 14, 2026, 05:09 AM

Updated

Feb 15, 2026, 04:16 AM

2 minutes reading time

Members of Ledger's security team examining hardware for vulnerabilities in a lab environment

A growing backlash is brewing among users of Ledgerโ€™s services, particularly surrounding the company's partnerships, including with Changelly. Many users feel unsettled by past security lapses, demanding more accountability and transparency from the crypto hardware giant, especially as the Donjon team's efforts unfold throughout 2025.

Foundations of Donjon's Mission

Ledgerโ€™s internal team of white-hat hackers, known as Donjon, is dedicated to enhancing crypto device security. Their approach includes finding weaknesses in both Ledger products and competitors' devicesโ€”aiming to stop breaches before they happen. As hackers are evolving their techniques, this proactive stance is critical.

Recent Findings and Ongoing Concerns

In 2025, Donjon has reported significant vulnerabilities:

  • MediaTek Dimensity 7300: By using electromagnetic interference, Donjon compromised the boot process in devices with this widely-used processor. This highlights the inherent security risks in consumer-grade electronics.

  • Tangem Wallet PIN Flaw: The team exploited timing vulnerabilities, cracking a four-digit PIN in under an hour by interrupting power at a precise moment.

  • Supply Chain Gaps: Discovering vulnerabilities in Trezorโ€™s Safe 3 microcontroller, Donjon illustrates how interconnected security threats can impact the entire crypto ecosystem.

โ€œItโ€™s crucial to address flaws before they turn into major problems,โ€ a Donjon spokesperson stated, reflecting the team's goal.

Controversial Partnerships and the Call for Change

The trust issues surrounding Ledger's collaborations are at the forefront of many peopleโ€™s discussions. Comments such as, "Nobody cares. You might have a great team, but your business practices suggest we shouldnโ€™t trust you," voice the discontent about transparency and past missteps. Users urge Ledger to distance itself from problematic associations to mend trust.

In light of this unrest, one commenter emphatically stated, "Remove Changelly and apologize to the victims first," calling for immediate action from Ledgerโ€™s leadership.

The Essentials of Security Updates

Donjon underscores that regular firmware updates serve as critical security features. An โ€œun-updatableโ€ device only heightens vulnerability.

"Security that doesnโ€™t evolve is just an old lock on a new door."

This sentiment reinforces the necessity of device updates, which protect against commonplace exploits.

Financial Risk and Community Sentiment

The community response illustrates a blend of frustration and skepticism. Despite Donjonโ€™s findings enhancing security measures, many are wary of Ledger's past errors, expressing concerns over hackers gaining information that could lead to financial losses. A user encapsulated this feeling perfectly, stating, "The companies should be boring and trusted without controversial practices."

End: The Future of Hardware Security and Trust

As the Donjon team continues its work in 2026, the message is clear: proactive measures will need to be at the forefront of all crypto interactions. A missed opportunity here could lead to rampant exploitation, so security has shifted from a peripheral concern to a top priority. Given the tumultuous trust landscape, will Ledgerโ€™s efforts be enough to restore faith among crypto communities?

Key Insights

  • โš ๏ธ Vulnerabilities in mainstream smartphone chips highlighted, raising alarm.

  • ๐ŸŒ Trust issues remainโ€”Ledger must address its controversial partnerships.

  • ๐Ÿ”„ Regular firmware updates are essential to combat evolving threats.

  • ๐Ÿ’ฌ Community voices stress the importance of accountability and transparency.

Moving forward, Ledgerโ€™s proactive security initiatives might be what the industry needs to regain user confidence and foster a safer crypto environment.