Ledger Faces Scrutiny After OneKey Claims Hack on Ethereum App

OneKey’s founder Yishi announced that their team successfully reproduced a security flaw in the Ledger hardware wallet, specifically targeting its Ethereum app. This revelation raises significant concerns for users and highlights the need for immediate updates. According to a tweet by Wu Blockchain, Ledger has addressed this issue in its latest app version, emphasizing the importance of user vigilance in maintaining security.

Breaking It Down

The broader crypto market is experiencing mixed signals, with varying momentum across major assets. In light of the recent findings by OneKey, users of Ledger wallets are urged to take action immediately. The reported vulnerability involves a transaction-replacement attack that could allow unauthorized transactions to be signed without user consent. Ledger has acknowledged the problem and released a fix in version 1.22.3 of its Ethereum app, but the incident underscores ongoing security challenges in hardware wallets. Users must ensure they update their applications through Ledger Live, as firmware updates alone are insufficient.

… Continue reading the full article at the original source below.