Ledger Urges Users to Update Ethereum App After Two New Security Flaws Discovered
Ledger, a maker of hardware wallets for cryptocurrencies, has urged its users to update their Ethereum app after two previously unknown bugs were discovered in an earlier security release.
The company released version 1.22.3 on August 25, which addressed the vulnerabilities that could allow operations to be hidden from device review or token approvals to be signed instead of expected payments.
OneKey, a rival wallet maker, had previously demonstrated a bug in older versions of Ledger's Ethereum app, but Ledger said this was already patched in version 1.22.2, released on August 13.
The two new bugs, LSB-024 and LSB-025, affected how the Ethereum app processed arrays of operations during clear signing and the token-payment path used by Ledger's Exchange application during swaps, respectively.