OneKey Reproduces Transaction Replacement Attack on Older Ledger Version

In a recent security demonstration, OneKey successfully reproduced a transaction replacement attack against an older version of Ledger's Ethereum application. The attack was carried out in a controlled lab environment, highlighting vulnerabilities in previous software versions. Ledger responded by releasing an update to its Ethereum app, version 1.22.2, which fixed the identified security flaw. Importantly, no user funds were compromised during this process, indicating that the vulnerability was effectively mitigated through the update. This incident underscores the importance of keeping hardware wallet firmware up to date to protect against potential exploits. Security researchers continue to scrutinize hardware wallet software to ensure the safety of user assets amid evolving attack techniques.