The Ledger NEAR app lags current protocol. A Ledger signer can't construct or sign transactions that use several mainnet features, and the gap grows as new actions land.
Process constraint: Ledger requires a security audit for any new transaction-parsing code. Landing features one PR at a time has stalled. Strategy: consolidate every gap below into a single audit rather than per-PR rounds — we're deliberately accepting one longer audit over repeated smaller ones.
Scope — the gap spans several signer surfaces, not just the action list:
| Surface |
Mainnet status |
Priority |
| Post-quantum signatures (ML-DSA-65) |
live |
P0 |
| Global contracts (NEP-591) |
live |
P1 |
| Deterministic accounts (NEP-616) |
live |
P1 |
| Gas keys |
live |
P2 |
| Meta-transactions with gas keys (DelegateV2, NEP-611) |
live |
P2 |
| Wallet contract / ETH-implicit accounts (NEP-518, NEP-641) |
live / NEP pending |
P2 |
| secp256k1 signing |
live |
P2 |
Workstreams
- Implementation — one audit-ready parser + UI diff per surface.
- Audit coordination — agree a single consolidated scope with Ledger before kicking off the audit.
- External dependency — NEP-641 approval gates the wallet-contract message-signing half of its issue.
The Ledger NEAR app lags current protocol. A Ledger signer can't construct or sign transactions that use several mainnet features, and the gap grows as new actions land.
Process constraint: Ledger requires a security audit for any new transaction-parsing code. Landing features one PR at a time has stalled. Strategy: consolidate every gap below into a single audit rather than per-PR rounds — we're deliberately accepting one longer audit over repeated smaller ones.
Scope — the gap spans several signer surfaces, not just the action list:
Workstreams