Throughout a latest interview, Ledger CEO Pascal Gauthier delivered a blunt evaluation of the cryptocurrency business’s safety panorama: excellent safety is an phantasm, and ultimately, everybody will ultimately expertise a compromise.
The remarks, made on November 10, 2026, come as 2026 has already recorded probably the most extreme yr for digital asset thefts on report, with cumulative losses operating into the billions.
Gauthier’s feedback arrived within the fast aftermath of the business’s largest single incident so far—a roughly $6.3 billion drain from Binance’s sizzling wallets in late October.
He in contrast that scale of loss with the roughly $90 million taken from clients who bought Ledger units by a Southeast Asian reseller later discovered to have distributed models fitted with unauthorized {hardware} implants.
These implants have been designed to seize restoration phrases displayed throughout preliminary setup and transmit them externally.
Gauthier famous that the Ledger-related losses, whereas substantial, represented a tiny fraction of the property the corporate claims to assist shield, and he maintained that decentralized self-custody nonetheless presents a tougher goal for attackers than concentrated trade balances.
Ledger’s personal historical past makes the warning significantly pointed.
The corporate has endured a number of information exposures through the years, together with a 2020 breach of its e-commerce and advertising techniques that uncovered contact particulars for a whole lot of hundreds of shoppers and triggered widespread phishing campaigns.
Newer third-party incidents, comparable to points involving logistics companions, have continued to position buyer info in danger even when machine {hardware} itself stays intact.
The October 2026 implant episode, centered on units offered by way of CryptoBilis, demonstrated that supply-chain and distribution channels stay susceptible factors.
Rival producer Trezor later reported related considerations involving the identical reseller, reinforcing that the issue is just not distinctive to at least one model.The difficulties haven’t been restricted to Ledger.
In July 2026, Coldcard {hardware} wallets grew to become the main target of one of many largest pure self-custody drains in Bitcoin’s historical past.
A longstanding firmware configuration error, launched in 2021, brought on sure fashions to generate seed phrases utilizing a weak software-based random quantity generator quite than the supposed {hardware} supply of entropy.
The ensuing seeds have been much more predictable than customers believed. Attackers systematically swept funds from hundreds of addresses, with estimates of losses reaching roughly 1,800 BTC (valued at nicely over $100 million on the time).
Firmware updates couldn’t retroactively strengthen seeds already created beneath the flawed course of; customers who had generated phrases on affected variations wanted to create completely new ones and migrate funds.
The episode highlighted how refined engineering defects can stay undetected for years after which be exploited at scale with none phishing or malware on the consumer’s facet.
Trezor and different {hardware} suppliers have confronted parallel challenges this yr, together with buyer information exposures linked to transport and achievement companions that equipped private particulars helpful for focused social-engineering assaults.
In abstract, these occasions have eroded the long-standing assumption that {hardware} wallets present near-absolute isolation as soon as bought from professional channels.
Centralized platforms have fared no higher.
Past the Binance incident—extensively attributed by analytics companies to stylish North Korean-linked actors—Bitget suffered a roughly $388 million theft in September after attackers gained inner credentials and solid withdrawal directions from sizzling and heat wallets.
Different exchanges and protocols have additionally reported vital losses.
Gauthier noticed that such concentrated failures are an inherent characteristic of centralized techniques and that the business ought to count on the risk setting, amplified by synthetic intelligence instruments, to develop tougher annually.On this local weather, many observers argue that probably the most sensible remaining protection is structural quite than absolute.
Holding everything of 1’s property on a single trade, in a single {hardware} pockets, or behind one seed phrase creates a single level of catastrophic failure.
Spreading holdings throughout a number of platforms, units, and custody strategies—whereas nonetheless making use of rigorous operational safety—reduces the affect of any particular person breach, whether or not it originates from an trade sizzling pockets, a tampered machine, a weak entropy implementation, or an information leak that allows subsequent phishing.
Gauthier’s remarks don’t diminish the worth of self-custody; he continues to argue that decentralized approaches have, in proportion phrases, suffered far smaller losses than centralized ones.
They do, nevertheless, reject the notion that any product or platform can provide everlasting immunity. As the quantity and class of assaults proceed to rise, the emphasis is shifting from the seek for an unbreachable resolution towards resilience by diversification and steady enchancment of defenses.
