Ledger SDK Sends Signing Metadata by Default, Ambire Says

The substance here is less about a single wallet vendor than about default telemetry in signing flows, where destination addresses are exactly the kind of data hardware wallets are trusted to keep local. That Ambire flagged it and kept affected versions out of production matters, but the absence of version details or an isolation method leaves the practical exposure unclear for other integrators. The open question is whether default metadata transmission in signing tooling gets treated as a design flaw across the ecosystem or as an accepted norm.