Hi, guys! I got three Ledger nano s and I got this very interesting question one day when I using it.
What if the manufacturer did something evil? I mean of course you can always wipe the ledger nano as much as you like, and of course, the code of it is open-source online. What if the manufacturer only provides a certain range of words to generate a weak private key, which can be gained by exhaustive attack method? After all, you can only comply with the seed words it provides.
How can we know for sure the ledger nano we have is not provided by evil manufacturers? I mean, you cannot open it and check it thoroughly. I just really curious about this question and it haunted me. Is it possible? And is it possible for some hacker to gain interest with any bug that hides inside this hardware wallet?
Please correct me if wrong. Really appreciated!
And what about the official and unofficial wallets?
Of course they can do that, but the real question is why would they do that? Ledger is a serious company and they should have some random quality control to check that everything is ok. You can also send your ledger to a security company to check whether every seems ok.