🚨 OneKey Reproduces Exploit on Outdated Ledger App
The security team at OneKey, led by founder Yishi Wang, has successfully reproduced a "transaction replacement attack" targeting an older version of the Ledger Ethereum app (v1.22.1). This vulnerability allows an attacker to overwrite a transaction while the user is still reviewing the legitimate details on their hardware wallet screen.
Executing this exploit requires the attacker to gain control over the communication between the Ledger device and the host computer. This is typically achieved through malware, compromised wallet software, or malicious websites. The issue is specific to the transaction signing process and does not affect seed phrase security.
#Ledger #CryptoSecurity #Ethereum #OneKey
The security team at OneKey, led by founder Yishi Wang, has successfully reproduced a "transaction replacement attack" targeting an older version of the Ledger Ethereum app (v1.22.1). This vulnerability allows an attacker to overwrite a transaction while the user is still reviewing the legitimate details on their hardware wallet screen.
Executing this exploit requires the attacker to gain control over the communication between the Ledger device and the host computer. This is typically achieved through malware, compromised wallet software, or malicious websites. The issue is specific to the transaction signing process and does not affect seed phrase security.
#Ledger #CryptoSecurity #Ethereum #OneKey