Security Research

Donjon @ Ledger

We are the security research team at Ledger, dedicated to protecting your digital assets through cutting-edge security research, vulnerability discovery, and open-source tools.

Bug Bounty Program About Us Read the Donjon Blog

Security Bulletins

Technical details of past security issues, their impact, and available patches.

Threat Model

Comprehensive documentation of security objectives and mechanisms.

Tools Suite

Open-source security research tools for hardware and software analysis.

Bug Bounty

Report vulnerabilities and earn rewards for helping secure Ledger products.

Latest Blog Posts

View all posts

Dec 3, 2025 New

Is Your Smartphone’s Hardware Safe?

Smartphones are commonly lost or stolen, but could that impact your security? The Ledger Donjon targeted a recent SoC to find out exactly how secure today’s smartphones are.

Sep 17, 2025

The Vulnerability Exposing Tangem Cards to Brute-Force Attacks

The Vulnerability Exposing Tangem Cards to Brute-Force Attacks...

May 15, 2025

Tangem Genuine Check Bypass on Android Application

Latest Security Bulletins

View all bulletins

LSB 021

Ledger Security Bulletin 021

Missing parameter validation during MCU firmware update

LSB 020

Ledger Security Bulletin 020

Ledger Live incorrectly parses some EIP-712 messages

LSB 019

Ledger Security Bulletin 019

Invalid addresses for certain miniscript policies

Found a vulnerability?

We reward security researchers who help us protect our users. Join our bug bounty program and get recognized in our Hall of Fame.

Submit a Report Hall of Fame