Ledger Owners Urged to Update Ethereum App Over Security Flaw

A security flaw in Ledger's Ethereum app has left owners of certain hardware wallets vulnerable to manipulation. The issue, which was identified by security firm TestMachine, affects devices that have an outdated version of the Ethereum app installed.

The vulnerability allows a malicious website to send a second signing command while the user is reviewing a transaction on the device's screen. This can result in the user confirming a different transaction than the one they intended to sign.

According to Ledger, the issue was fixed in version 1.22.2 of the Ethereum app. Owners are advised to check their device's version number and update to the latest version if necessary.