So how's that if you were using Ledger Nano S on ED? I understand that he can't confirm transactions since you need to use physical button to approve it.
Yes, thats right.
Ether Delta creates the transactions and you have to sign (approve) them via pushing the physical buttons.
But did he get your private key/ seed?
In this case he doesn't have any chance to get the seed (or private keys). They
never get exposed to 'outside' of the nano s.
Could he import that in another Ledger Nano S wallet and send funds from there?
No, because look above.
Generally: You dont need a nano s to import the seed and transfering coins. Any BIP39-compatible wallet can do that.
Can PIN code prevent that?
1. This can't happen (look above)
2. The pin code only secures your funds against physical access (thief would have to know your pin code). In a scenario where the attacker has your private key or seed he doesn't need to
access your device since he can easily create transaction by himself (with any other tool/wallet).
Is there something owner of ledger wallet could/should do in this case? Are there any cases in which your private key/mnemoric seed would get exposed and stolen from Ledger Wallet, example: if you are using My Ether Wallet with Nano S and someone would replace their domain?
Your private key / seed never gets exposed.
However, a 'fake' ether delta would steal your money in terms of taking your deposits and not paying out withdrawals.
As long as you confirm/approve transactions consicious only these 'deposits' would be stolen from you (and additionally your master public key would be known to the fake ED,
destroying your privacy).
