Ledger says Ethereum signing flaw was already fixed

Ledger says Ethereum signing flaw was already fixed

Ledger says it fixed a vulnerability affecting certain Ethereum clear signing flows and urged users to update their firmware and applications.

Ledger pushes back on Ethereum app flaw claims: 'Manufacturing fear for attention'

A security researcher had disclosed the issue publicly, which led to a dispute between the researcher and Ledger.

Ledger Fixes Ethereum App Signing Bug Affecting Clear Signing

Ledger’s Ethereum app version 1.22.2, released August 12, patched a bug in how the app handled transaction review, according to the project’s own public changelog. The bug could have let a malicious application swap the transaction a user was...

Ledger Patches Ethereum Signing Flaw Before Researchers Disclose It

Ledger has patched a vulnerability in its Ethereum hardware-wallet app that could allow a malicious dApp to replace a transaction during the approval process while the device continued showing users the transaction they originally reviewed. Security firm TestMachine disclosed the signature-substitution flaw on August 21 after reproducing it on Ledger hardware. Ledger had already shipped Ethereum app version 1.22.2 on August 12, with its release …

Ledger fixes vulnerability in Ethereum app's signing flows

The incident underscores the critical need for transparency and proactive communication in cybersecurity to maintain user trust and safety. The post Ledger fixes vulnerability in Ethereum app’s signing flows appeared first on Crypto Briefing.