critical medium likelihood
R-003: Security and privacy trust fragility
Ledger's value proposition depends on trust; the 2020 data breach and phishing fallout show that non-wallet data systems can still harm customers and brand.
Diligence request: Conduct independent security/privacy diligence, incident review, phishing-impact analysis, SOC/ISO audit review and breach remediation verification.
high high likelihood
R-001: Financial opacity and runway unknown
Ledger does not publish audited financials, product revenue, gross margin, cash, burn, runway, debt or unit economics.
Diligence request: Require audited financials, management accounts, cash/debt schedule, product/channel P&L, burn and runway before valuation reliance.
high medium likelihood
R-002: Crypto-cycle demand volatility
Hardware-wallet and app-service demand may fluctuate with crypto prices, exchange failures, consumer sentiment and NFT/DeFi activity.
Diligence request: Review monthly bookings by crypto market regime, cohort retention, downside scenario and inventory exposure.
high medium likelihood
R-004: Ledger Recover trust and regulatory exposure
Identity-based backup may improve accessibility but introduces provider, identity, consent, law-enforcement, privacy and perception risks.
Diligence request: Review Recover audits, source-code release, provider contracts, DPIA, legal memos, user consent and incident simulations.
high medium likelihood
R-006: Partner and supplier dependency
Ledger depends on third-party transaction providers, Recover/HSM providers, hardware suppliers, retail/affiliate channels and enterprise integrations.
Diligence request: Review material contracts, SLAs, termination rights, DPAs, supplier redundancy, provider compliance and business-continuity plans.
high medium likelihood
R-008: Regulatory, privacy and consumer-protection exposure
Privacy obligations, third-party crypto-service integrations, Recover identity verification, hardware compliance and global consumer claims create multi-jurisdiction exposure.
Diligence request: Obtain legal/regulatory memos, CNIL correspondence, DPIAs, AML/sanctions allocation, product compliance files and complaints schedule.
high unknown likelihood
R-005: Customer concentration and churn unknown
Public sources provide aggregate adoption but not top customers, churn, NRR, active-device cohorts or revenue concentration.
Diligence request: Request customer schedules, cohort retention, active devices, NRR/churn, enterprise references and channel concentration.
medium high likelihood
R-007: Competitive price, UX and trust pressure
Competitors such as Trezor, Tangem and Keystone market overlapping security, simplicity and open-source attributes, while software wallets/exchanges compete on convenience.
Diligence request: Request win/loss data, market share, pricing elasticity, NPS, CAC by competitor and switching analysis.