Ledger Appoints Former Fireblocks Executive Oded Blatman as Chief Information Officer and Chief Security Officer
Ledger appoints Oded Blatman to oversee security and information
Hardware wallet company Ledger has appointed former Fireblocks executive Oded Blatman as Chief Information Officer (CIO) and Chief Security Officer (CSO), reporting to Chairman and CEO Pascal Gauthier. He will manage network and infrastructure security, product security, the Donjon research team, physical and workplace safety, security operations, vendor assurance, internal IT, and enterprise risk.
Blatman served as CIO and CISO at Fireblocks for five years, overseeing international expansion. He previously held the global CISO position at Israel's largest bank, Bank Hapoalim, and was CIO and CISO at ClickSoftware during its acquisition by Salesforce. Ledger stated that artificial intelligence is reducing the cost and time of vulnerability searches, while attacks are becoming more complex and larger in scale, necessitating equally rapid defenses. Bloomberg contextualized the appointment against the backdrop of approximately $1.4 billion in hacker and vulnerability losses in the crypto industry over the past year; reports quote technology leader Charles Guillemet stating that the cost to generate exploitable smart contract attacks can be as low as about $1.22.
The company has integrated information and security under one role due to the inseparability of internal systems and product security in the context of tokenization, AI agents executing financial operations, and institutional adoption. Blatman noted that once agents begin taking financial actions on behalf of users, the stakes for aligning security and intent become higher. The appointment also supports Ledger's enterprise business and comes ahead of the OP3N launch event on October 15.
Ledger's signature devices maintain a narrative of being unbreached, with pressure coming from supply chains, corporate networks, and agent layers rather than a single security chip.
Market mechanisms indicate a talent flow from institutional custody stacks to hardware self-custody stacks. Beneficiaries include Ledger, which aims to sell cold storage to banks and asset managers; those under pressure are exchanges and wallets that still separate security officers and information officers and cannot conduct unified audits of agent permissions. Funds do not move due to a mere appointment; institutional due diligence will add "who manages IT and product security simultaneously" as a new checkbox.
The $1.4 billion industry loss is a contextual figure, not a reflection of Ledger's impairment this quarter. If agents are authorized to sign, the attack surface expands from firmware to the intent layer.
Source: Public Information
ABAB AI Insight
Ledger combines the roles of CIO and CSO, acknowledging that vulnerabilities no longer reside solely in a single product: corporate email, vendors, the Donjon lab, and hardware firmware share the same identity system. Fireblocks is an institutional hot wallet and settlement middleware, while Bank Hapoalim represents a traditional banking defense line; this background is aimed at selling hardware wallets into custody questionnaires rather than reiterating the chip story. The claim of generating attacks for $1.22 shifts the offense-defense dynamic from expert competition to computational power subscription.
Capital continues to purchase hardware at a premium, provided that corporate security resembles that of banks. The OP3N launch event requires a name capable of signing both products and internal networks. The experience of Salesforce acquiring ClickSoftware illustrates that he has handled security transitions during consolidation, which is beneficial for Ledger as it may continue to seek financing or connect with large tech firms.
In contrast to Trezor, Copper, and Anchorage, which separate security officers, the industry is shifting from device protection to intent protection: keys can be offline while agent instructions remain online. Whoever first incorporates "model delegation" into the permission tree will redefine the boundaries of hardware wallets.
This represents a technological substitution: manual vulnerability discovery is accelerated by models, necessitating a merger of defense frameworks. The mechanism is that as the marginal cost of attacks decreases, separating roles creates response gaps, which institutional clients use to determine custody budgets.
ABAB News · Cognitive Law
The cheaper it is to find vulnerabilities, the less separation there can be between security officers and information officers.
Keys can be offline, but agent instructions still operate online.
The banking background sells not the chip, but the checkbox on the questionnaire.