Cryptocurrency hardware wallet Ledger has been found to contain a major security flaw, which could enable hackers to steal funds from users through a variety of different methods. The exploit was identified by a teen digital security expert, Saleem Rashid, earlier this week and undermined Ledger\u2019s claims to be \u2018tamper-free.\u2019 Upon discovering the exploit, Rashid contacted Ledger CTO Nicolas Bacca to report his findings. The flaw theoretically allows retailers and resellers to load compromised firmware, which would be successfully verified by the device via its connection to the Secure Element. As soon as the compromised device is used for storing cryptocurrency, the hacker could then successfully recall the relevant private keys, which would effectively allow them to walk away with the contents of the wallet. According to Rashid, his initial referral of the security flaw was dismissed by the firm, who refused to engage seriously with his recommendations. Nevertheless, a firmware update was released, which went on to attract further criticism from the teenager. The findings have divided opinion amongst the cryptocurrency community, with some users suggesting the flaw wasn\u2019t as serious as Rashid had initially suggested. Responding to user comments on Reddit, Ledger CEO Eric Larchev\u00eaque described Rashid\u2019s technical report into the flaw, published on his blog, was \u2018a massive FUD\u2019, and disclosed as a reaction to the firm\u2019s unwillingness to treat his findings seriously. \u201cSaleem got visibly upset when we didn\u2019t communicate as 'critical security update' and decided to share his opinion on the subject,\u201d the Ledger CEO said. Ledger subsequently published an update, explaining three separate security issues identified by a team of bounty programme researchers. Notably, Saleem Rashid was included amongst the three security experts working on the project\u2014something Rashid himself has denied. The move follows on from Rashid\u2019s earlier work, most notably in identifying similar flaws with the TREZOR One device. The flaws identified in this case were more warmly received, and even garnered public praise for Rashid from the firm\u2019s CEO. Nevertheless, it seems not all hardware wallet manufacturers are as open to discussing security flaws with independent researchers like Rashid, and in any event, often less willing to release critical security updates to patch these flaws.