Ledger CTO calls for responsible AI bug disclosures and cautions against attention farming

Ledger’s chief technology officer has urged researchers using artificial intelligence to identify software vulnerabilities to handle disclosures responsibly, Cointelegraph reported on September 8, 2026. The executive also warned against “attention farming,” highlighting concerns about how security findings are presented publicly. Ledger and Trezor said researchers have a responsibility to publish their findings when vendors do not fix reported bugs within an agreed disclosure window. The comments place emphasis on a coordinated approach between researchers and technology providers: vendors should have an opportunity to address vulnerabilities, while researchers should not leave unresolved issues undisclosed indefinitely. The report offers no additional details about a specific bug, product, affected asset or remediation timeline. The remarks are relevant to the wider debate over AI-assisted security research and the standards that should guide public reporting of vulnerabilities.