No, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says

Decrypt08-27 18:16

In brief OneKey reproduced a transaction-replacement attack against version 1.22.1 of Ledger’s Ethereum app. Ledger says it fixed the vulnerability in version 1.22.2 before OneKey published its test ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2662508796?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/01/ledger-flex-decrypt-style-01-gID_7.jpg@webp","is_english":true,"pubTime":"2026-08-27 18:16","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2662508796","market":"nz","top_or_hot":-1,"title":"No, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says","media":"Decrypt","content":"<div>\n<p>In brief\nOneKey reproduced a transaction-replacement attack against version 1.22.1 of Ledger’s Ethereum app.\nLedger says it fixed the vulnerability in version 1.22.2 before OneKey published its test ...</p>\n\n<a href=\"https://decrypt.co//376750/no-ledger-wasnt-hacked-ethereum-app-exploit\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>No, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nNo, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-27 18:16 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//376750/no-ledger-wasnt-hacked-ethereum-app-exploit><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nOneKey reproduced a transaction-replacement attack against version 1.22.1 of Ledger’s Ethereum app.\nLedger says it fixed the vulnerability in version 1.22.2 before OneKey published its test ...</p>\n\n<a href=\"https://decrypt.co//376750/no-ledger-wasnt-hacked-ethereum-app-exploit\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETCO","symbol_name":"Grayscale Ethereum Covered Call ETF","start_time":0,"source_url":"https://decrypt.co//376750/no-ledger-wasnt-hacked-ethereum-app-exploit","article_id":"2662508796","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/01/ledger-flex-decrypt-style-01-gID_7.jpg@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//376750/no-ledger-wasnt-hacked-ethereum-app-exploit","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2662508796","pubTimestamp":1787825763,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"OneKey demonstrated how an outdated Ethereum app could sign a transaction different from the one shown on a Ledger device, but the wallet maker says the vulnerability had already been fixed.","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETCO":"Grayscale Ethereum Covered Call ETF","ETHT":"ProShares Ultra Ether ETF","QETH":"以太坊ETF-Invesco Galaxy","ETU":"T-Rex 2X Long Ether Daily Target ETF","ETHU":"2倍以太币期货ETF-Volatility Shares","ETHV":"以太坊ETF-VanEck","TETH":"21Shares Ethereum ETF","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","FETH":"以太币ETF-Fidelity","ESK":"REX-Osprey ETH + Staking ETF","EETH":"以太币期货ETF-ProShares","ETHA":"以太坊ETF-iShares","YETH":"Roundhill Ether Covered Call Strategy ETF","SETH":"1倍做空以太币期货ETF-Proshares","BTF":"比特币&以太币期货ETF-CoinShares","ETHD":"ProShares UltraShort Ether ETF","EZET":"以太坊ETF-Franklin","ETHE":"最大以太坊ETF-Grayscale","ETHI":"Defiance Leveraged Long Income Ethereum ETF"},"translate_title":"不，Ledger 没有被黑客攻击： 公司称易受攻击的以太币应用程序在被利用前已被打补丁","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETHV":0.6,"FETH":0.6,"ETCO":0.6,"YETH":0.6,"ETHE":0.6,"ETHI":0.6,"ETHW":0.6,"TETH":0.6,"BTF":0.6,"ESK":0.6,"ETHT":0.6,"QETH":0.6,"ETHD":0.6,"ETHA":0.6,"ETU":0.6,"ETHU":0.6,"ETQ":0.6,"EZET":0.6,"SETH":0.6,"ETH":0.6,"EETH":0.6},"content_text":"In brief\nOneKey reproduced a transaction-replacement attack against version 1.22.1 of Ledger’s Ethereum app.\nLedger says it fixed the vulnerability in version 1.22.2 before OneKey published its test and has seen no evidence of attacks against users.\nLedger recommends installing Ethereum app version 1.22.3 or later and checking the app version on the device.\nCryptocurrency wallet developer Ledger rejects claims that it had been hacked after researchers at rival wallet maker OneKey reproduced a transaction-replacement vulnerability using an outdated version of Ledger’s Ethereum app.On Thursday, Yishi Wang, founder and CEO of OneKey, said on X that the company’s Anzen security team recreated the attack against Ethereum app version 1.22.1 in a lab.Myriad: Ethereum next price move? Click to make your prediction.“The bug is a race condition between the transaction display logic and the underlying transaction buffer,” Wang wrote. “An attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one.”That would mean a hacker who had compromised the software communicating with a vulnerable Ledger app could show the user a legitimate Ethereum transaction, then replace its details before signing, redirecting funds to the hacker’s wallet without the change appearing on the device.Ledger Chief Technology Officer Charles Guillemet rejected OneKey’s characterization, saying that reproducing an already-patched bug does not amount to “hacking Ledger.”“What this thread describes is a vulnerability in an outdated version of the Ethereum app,” he responded on X. “It was identified through our security process and fixed in Ethereum app 1.22.2, released August 13, before this post.”In a security bulletin published on Thursday, Ledger said the flaw could cause an affected app to display one transaction while signing another. An attacker would first need to control communications between the device and its host through malware, a compromised wallet app or a hostile website.Ledger said it found no evidence that anyone exploited the vulnerability outside a laboratory.“No user was hacked. No exploitation in the wild,” Guillemet wrote. “Running an exploit against an old version after the fix has shipped is a lab exercise, not a finding.”Ledger added safeguards in Ethereum app version 1.22.2 on Aug. 13, then addressed the underlying issue in Secure SDK version 26.6.1 on Aug. 21 and rebuilt its apps with the corrected software. The company recommends version 1.22.3 or later, which also fixes a separate transaction-display vulnerability. Ledger published its bulletin on Aug. 27.When asked about Onekey’s claims, Ledger pointed Decrypt to Ledger Donjon, the company’s internal security research team, which said in a separate X post that the episode showed why hardware wallets need to support software updates.“All software has bugs. Hardware wallets are no exception,” the team wrote. “That’s why updateability is a core part of Ledger’s security architecture: when a vulnerability is found, whether by our own Donjon team or by external researchers, we can patch every device in the field. A wallet that can’t be updated can’t be fixed.”Myriad: Solana's next price move? Click to make your prediction.Ledger advised customers to install the latest firmware and apps through Ledger Wallet, update the Ethereum app to version 1.22.3 or later, and verify the version shown on the device. Apps and firmware update separately.Earlier this month, after attackers stole more than $130 million in Bitcoin from users of Coldcard air-gapped wallets, Guillemet told Decrypt that the incident was a warning for the hardware wallet industry.“We also don't just rely on our own word for it,” he said. “Our Donjon research lab exists to try to break our products before anyone else can.”Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.Your EmailGet it!Get it!","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.48.0","shortVersion":"4.48.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2662508796","isCrawlerRequest":true}