OneKey Reproduces Vulnerability in Outdated Ledger Ethereum App

OneKey's in-house security team successfully reproduced an exploit targeting an outdated version of Ledger's Ethereum app. The team executed a 'transaction replacement attack' against Ledger Ethereum app 1.22.1, which allowed attackers to overwrite transactions waiting to be signed while the user is still reviewing them.

This vulnerability was previously patched by Ledger in August, with the release of app-level safeguards in version 1.22.2 on August 13 and the underlying issue fixed in Secure SDK 26.6.1 on August 21.

Ledger emphasized that no user was hacked, as this was a lab reproduction of a vulnerability in an outdated version of the Ethereum app.

OneKey's test comes after the Coldcard exploit in July, where attackers exploited a firmware bug introduced in March 2021 that weakened seed randomness on some Coldcard wallets. Ledger had stated its devices were not affected by this vulnerability due to recovery phrases generated using a certified source of randomness built into the device's security chip.