Why Your Hardware Wallet Display Can Mislead You
When a client places a Ledger on our desk and says “this shows my entire stack,” we gently ask to export the xpub. In roughly one session in five, the on-screen total does not match the sum of all derived addresses — usually because change addresses from years ago were never labelled, or because a previous firmware migration created a parallel derivation path.
The device display aggregates what its firmware knows about. It does not perform a forensic sweep of every path your seed could theoretically generate. For a holder who has never spent, this gap may be invisible: coins sit on addresses the UI never surfaced.
What we check instead
We export the extended public key from each device and derive the full address list using open-source tooling on our side. We then query the blockchain for each address individually. The difference between this method and the screen total is often small — sometimes zero — but when it is not, the discrepancy tends to cluster in change outputs from 2017–2019.
A practical habit
Even if you never book a review, export your xpub annually and archive the file alongside your tax records. Label the export date and firmware version. If you upgrade devices, export from both old and new before decommissioning anything.
This single habit has saved more of our clients from “I thought I lost those coins” moments than any other preparatory step.