On September 7, Ledger CTO Charles Guillemet published an open letter urging the crypto industry to make coordinated vulnerability disclosure an official standard. He argued that as AI makes it easier and cheaper to find and exploit bugs, responsible disclosure is more critical than ever for the security of crypto devices.

What Ledger Proposed

The initiative calls for coordinated disclosure practices to become the norm for wallet makers and crypto service providers: researchers would report any vulnerabilities directly to the teams, who would then fix the issues and inform users in a structured, agreed-upon way. The letter highlights how AI has dramatically lowered the cost and sped up bug discovery, so the industry needs to act in sync and handle disclosures responsibly.

Who’s Backing the Plan

Ledger’s proposal has public support from Trezor, Foundation, AnchorWatch, SEAL, and other key players in the space. This unified front from top hardware wallet makers and infrastructure teams signals a real willingness to set clear ground rules for how researchers, vendors, and users should interact when vulnerabilities are found.

AI and Security: The Bigger Picture

As AI-powered tools lower the barrier to finding and exploiting bugs, coordinated disclosure is seen as a way to boost predictability and speed up response times without putting users at risk. The push from Ledger and its supporters is about formalizing a responsible process for dealing with vulnerabilities, not just running a one-off campaign.