Ledger Fixes Critical Ethereum App Bug

Ledger has fixed a bug in its Ethereum app's clear signing feature that could have allowed malicious apps to swap transaction details while users reviewed them. The fix was released about two weeks before security firm TestMachine publicly disclosed the issue.

Ledger's CTO emphasized that no confirmed cases of stolen funds from this flaw have emerged, and users are urged to update their Ledger software and firmware.

The company stresses the importance of verifying transactions directly on the device screen to avoid risks from blind signing. This is especially crucial given the potential for malicious apps to manipulate transaction details.