Skip to content

© 2026 Proof of Talk by Xventures | All rights reserved

← All Speakers
Charles Guillemet
Speaker · Proof of Talk 2026
Ledger

Charles Guillemet

Chief Technology Officer, Ledger

Guillemet argues that AI is pushing the cost of finding and exploiting software vulnerabilities towards zero, and that a dedicated device kept off the internet is more secure by design.

The Significance

Why the room needs them.

Charles Guillemet, Chief Technology Officer of Ledger and founder of its Donjon security lab, spoke at Proof of Talk Paris 2026. He sat on the Hecto Main Stage panel on securing DeFi and the machine economy.

The Numbers
2017
Year he founded the Ledger Donjon security lab
2019
Year Ledger appointed him Chief Technology Officer
The Biography

The full account.

Charles Guillemet is Chief Technology Officer of Ledger, the French cryptocurrency security company best known for its hardware wallets. Ledger announced his appointment to the role on 5 December 2019, stating that he would keep his oversight of the company's security operations. He had joined Ledger in 2017 as Chief Security Officer and founded the Ledger Donjon, the company's in-house security evaluation lab, that year. Ledger credits him with establishing its security department and with obtaining independent security certifications for the Ledger Nano S and Ledger Nano X.

Before Ledger, Guillemet spent about ten years in cryptography and hardware security. He began his career at Tiempo, a secure-industry start-up, where he designed the security of EAL5+ secure integrated circuits, and then worked as technical manager at a Common Criteria accredited security evaluation facility at the CEA. He holds a Master of Science in Cryptography and Security from the ENSIMAG engineering school, where he graduated as valedictorian and later taught smart-card security.

The Donjon evaluates the security of Ledger's own devices and those of other manufacturers, and discloses what it finds responsibly. Its published disclosures include a side-channel attack on the PIN verification of the Trezor One (2018), weak entropy in the Trust Wallet browser extension (2022) and a brute-force weakness in Tangem cards (2025). In September 2026 Ledger described Cerberus, a team of six specialised AI agents built by the Donjon to find, verify and fix security flaws, and reported that four of its findings in third-party software had been assigned CVEs.

In an April 2026 interview with CoinDesk, Guillemet argued that AI is making it far cheaper and easier to find and exploit vulnerabilities, and that a dedicated device not exposed to the internet is more secure by design.

Guillemet spoke at Proof of Talk Paris 2026 on the Hecto Main Stage on 3 June 2026, the summit's second day, as a panellist on "DeFi Under Attack: Securing Onchain Finance and the Machine Economy", alongside Kostas Chalkias, Rodrigo Coelho and Jason Jiang. Nikola Stojanow moderated the session.

The Thesis · on the record

What Charles believes about the next ten years.

01
To build secure products, try to break them
Ledger's account of the Donjon's origins quotes a line it says Guillemet often uses: "If you want to build secure products, you need to try to break them" (Ledger.com, 6 March 2026).
02
AI is making attacks cheaper
In an April 2026 CoinDesk interview he said that "finding vulnerabilities and exploiting them becomes really, really easy" as AI improves, that "the cost is going down to zero", and that as a result defenders "need to be perfect" (CoinDesk, 5 April 2026).
03
Dedicated hardware is more secure by design
In the same interview he argued that "when you have a dedicated device not exposed to the internet, it is more secure by design" (CoinDesk, 5 April 2026).
The Timeline

Years of shipping.

2009–2014
Cryptosystems design expert at Tiempo, designing the security of EAL5+ secure integrated circuits.
2014–2017
Security evaluator, then technical manager, at a Common Criteria accredited security evaluation facility (ITSEF) at the CEA; also teaches smart-card security at ENSIMAG.
2017
Joins Ledger as Chief Security Officer and founds the Ledger Donjon security lab.
2019
Ledger announces his appointment as Chief Technology Officer on 5 December 2019.
2026
Speaks on the panel "DeFi Under Attack: Securing Onchain Finance and the Machine Economy" at Proof of Talk Paris 2026, 3 June.
In Their Words

Lines that keep proving correct.

Finding vulnerabilities and exploiting them becomes really, really easy

CoinDesk, 5 April 2026

When you have a dedicated device not exposed to the internet, it is more secure by design

CoinDesk, 5 April 2026

If you want to build secure products, you need to try to break them.

Ledger.com, "The Ledger Donjon Origin Story", 6 March 2026
The Body of Work

What they have built, written, and backed.

Built

  • Ledger DonjonFounded in 2017 as Ledger's in-house security evaluation lab, which assesses Ledger's own devices and other manufacturers' devices and discloses vulnerabilities responsibly.
  • Ledger's security departmentPer Ledger's December 2019 announcement, he established the company's security department and obtained independent security certifications for the Ledger Nano S and Ledger Nano X.

The next Proof of Talk is in Abu Dhabi.

Louvre Abu Dhabi, 3–4 December 2026. Admission is by application, and the room is capped at 2,000.

Request access