Two days after Cardano announced its integration of Ledger hardware wallets into its ADA ecosystem comes warning of a potential attack vector. Ledger is the world-leading provider of cold storage technology, with their USB-stick type devices offering users the option to take their currencies offline, store them in the hardware wallet and put the device itself into a safe or other security bunker. More and more users are choosing this option in response to the vulnerability of online software wallets to hacking.

Ledger was apparently contacted on January 4th by a user pointing out a potential vulnerability in their system, but no response was received from the CEO or CTO of Ledger throughout that month. Details of the attack vector were then published on a general forum, when Ledger finally responded on February 3rd with a tweeted warning, citing the published details. The company advised users always to verify their receiving address in order to mitigate the potential of a MITM attack (Man in the Middle).

This MITM could potentially substitute a user\'s \'receive\' address with his own, at the time when the hardware device is plugged into the online transaction system. So far no attacks have been made in this fashion, but users have now been alerted to the possibility.