Ledger launched an industry commitment on coordinated vulnerability disclosure, joining Trezor, Foundation and AnchorWatch to set a common crypto security standard. Flaws will be reported privately, fixed, then disclosed publicly.