2026-06-19 · ledger
Ledger published a technical post explaining how it protects users from invisible proxy contract attacks, including attack patterns associated with the $1.4 billion Bybit hack. The post focuses on real-time EVM execution simulation traces that help expose what a transaction will actually do before a user approves it. For digital asset custody, the lesson is simple: signing security matters as much as storage security. Hardware cold wallets reduce key exposure, while transaction simulation helps prevent users from approving malicious on-chain actions.
Ledger's post explains proxy support for detecting hidden transaction behavior that can be obscured behind smart contract proxy patterns. The goal is to make risky EVM execution paths visible before a user signs with a Ledger device.
In crypto custody, a single bad signature can move assets irreversibly, with no password reset or bank reversal. Proxy contract abuse is especially dangerous because the user may think they are approving one action while the execution path enables another.
Cold hardware signing keeps private keys off internet-connected devices, limiting what malware or a compromised app can steal directly. Combining offline key custody with clear transaction review and simulation reduces both key-theft risk and deceptive-signing risk.
Read Original Post →