Why the room needs them.
Charles Guillemet, Chief Technology Officer of Ledger and founder of its Donjon security lab, spoke at Proof of Talk Paris 2026. He sat on the Hecto Main Stage panel on securing DeFi and the machine economy.
The full account.
Charles Guillemet is Chief Technology Officer of Ledger, the French cryptocurrency security company best known for its hardware wallets. Ledger announced his appointment to the role on 5 December 2019, stating that he would keep his oversight of the company's security operations. He had joined Ledger in 2017 as Chief Security Officer and founded the Ledger Donjon, the company's in-house security evaluation lab, that year. Ledger credits him with establishing its security department and with obtaining independent security certifications for the Ledger Nano S and Ledger Nano X.
Before Ledger, Guillemet spent about ten years in cryptography and hardware security. He began his career at Tiempo, a secure-industry start-up, where he designed the security of EAL5+ secure integrated circuits, and then worked as technical manager at a Common Criteria accredited security evaluation facility at the CEA. He holds a Master of Science in Cryptography and Security from the ENSIMAG engineering school, where he graduated as valedictorian and later taught smart-card security.
The Donjon evaluates the security of Ledger's own devices and those of other manufacturers, and discloses what it finds responsibly. Its published disclosures include a side-channel attack on the PIN verification of the Trezor One (2018), weak entropy in the Trust Wallet browser extension (2022) and a brute-force weakness in Tangem cards (2025). In September 2026 Ledger described Cerberus, a team of six specialised AI agents built by the Donjon to find, verify and fix security flaws, and reported that four of its findings in third-party software had been assigned CVEs.
In an April 2026 interview with CoinDesk, Guillemet argued that AI is making it far cheaper and easier to find and exploit vulnerabilities, and that a dedicated device not exposed to the internet is more secure by design.
Guillemet spoke at Proof of Talk Paris 2026 on the Hecto Main Stage on 3 June 2026, the summit's second day, as a panellist on "DeFi Under Attack: Securing Onchain Finance and the Machine Economy", alongside Kostas Chalkias, Rodrigo Coelho and Jason Jiang. Nikola Stojanow moderated the session.
What Charles believes about the next ten years.
Years of shipping.
Lines that keep proving correct.
“Finding vulnerabilities and exploiting them becomes really, really easy”
“When you have a dedicated device not exposed to the internet, it is more secure by design”
“If you want to build secure products, you need to try to break them.”
What they have built, written, and backed.
Built
- Ledger DonjonFounded in 2017 as Ledger's in-house security evaluation lab, which assesses Ledger's own devices and other manufacturers' devices and discloses vulnerabilities responsibly.
- Ledger's security departmentPer Ledger's December 2019 announcement, he established the company's security department and obtained independent security certifications for the Ledger Nano S and Ledger Nano X.
The next Proof of Talk is in Abu Dhabi.
Louvre Abu Dhabi, 3–4 December 2026. Admission is by application, and the room is capped at 2,000.
Request access