Ledger’s CEO told Bloomberg that nobody in crypto can promise perfect security, and the remark has divided the industry. Pascal Gauthier, chairman and CEO of the hardware wallet maker, said on November 10 that “Everybody Will Be Hacked At Some Point” during an appearance on Bloomberg Crypto. This Ledger CEO hack warning arrives as crypto theft climbs to record levels and wallet security faces tougher scrutiny from investors, regulators and everyday users. Hardware wallets sell on the promise of safe self-custody, so a blunt admission from the industry’s best known security executive carries real weight for anyone who holds digital assets.
Why the Ledger CEO Issued the Hack Warning
Gauthier spoke with hosts Isabelle Lee and Tim Stenovec, and he admitted that no hardware wallet, including his own company’s, can promise perfect protection. He said the same rule applies to Ledger and every other crypto security firm. He was answering a question about how Ledger prevents future hacks and how it explains device safety to customers. His answer pushed the conversation away from marketing claims and toward honest risk management.
The timing explains the urgency. Hackers stole $6.3 billion from Binance last week, and Binance revised the affected amount to about $6.34 billion in its November 3 post mortem. That breach renewed the debate over centralized exchange risk versus self custody. Gauthier refused to blame Binance and said the attackers are the criminals. He argued that the whole industry faces the same enemy, and that finger pointing between companies helps nobody.
Gauthier also said the narrative that decentralized security beats centralized security remains valid. In his view, a bank style exchange concentrates billions in one target, while self custody spreads the risk across millions of individual holders. He did not claim that self custody removes risk. He claimed that it limits the damage when an attack succeeds.
Hardware Wallet Losses and Crypto Theft Numbers
Ledger faces its own security test. Last month, the company confirmed that some of its devices contained an unauthorized hardware implant, which led to losses of nearly $90 million. Rival Trezor reported a similar incident days later, and the same Malaysian reseller, CryptoBilis, sits at the center of both disputes. Ledger described a distribution attack in which criminals bought genuine devices, added hidden components and returned them to the sales channel. Trezor also issued a precautionary warning about Safe 5 devices sold by the same reseller. Ledger has not confirmed a total loss figure.
Gauthier put the losses in context. He estimated that the Ledger device losses equal about 0.01% of the assets the company protects. He also argued that Ledger’s loss rate sits far below the losses tied to centralized platforms. He cited roughly $9 billion stolen from crypto last year and an estimated $12 billion so far in 2026. DefiLlama puts 2026 theft at nearly $8.7 billion, more than triple the 2025 total. The totals differ by source, but every count shows 2026 as the worst year on record for crypto hacks.
Attackers also keep getting cheaper and faster. Bloomberg’s video summary notes that the Binance hackers took 40% of the stolen cryptocurrency in one hit, and the move cost them just $15. In a March 25, 2026 post, Ledger argued that AI is lowering the cost of cyberattacks. Cheaper attacks mean more attackers, and that trend explains why Gauthier expects the numbers to climb.
Community Backlash and What Wallet Users Should Do
Critics responded quickly. Hardware wallet users and crypto commentators argued that the statement undermines the product Ledger sells. One commentator on X called it a strange thing for a hardware wallet CEO to say, and others read the comment as a pre-emptive disclaimer rather than a security posture. The backlash shows how much trust users place in the word “secure” on a hardware wallet box.
Gauthier also warned that threats will intensify. He said every year is going to get worse. He said artificial intelligence expands hackers’ capabilities and that quantum advances could eventually put certain cryptographic protections at risk. He also spoke about Ledger Atom, which adds extra security mechanisms. He noted that Ledger kept developing products during the CryptoBilis investigation.
For everyday holders, the lesson goes beyond the chip inside the device. Self custody security depends on tamper free delivery, confidential backups and accurate onscreen transaction details. The case also separates stolen recovery phrases from maliciously signed transactions, and the fixes differ: replacing hardware, revoking approvals and freezing tokens. Buy hardware wallets only from official channels, keep your recovery phrase offline and private, and verify every transaction on the device screen before you approve it. If a device arrives with damaged packaging or a pre-set recovery phrase, stop and contact the manufacturer.
The Ledger CEO hack warning does not mean self-custody has failed. It means crypto holders must treat security as a habit, not a purchase.
