OneKey Security Team Replicates Ledger Vulnerability; Attacked Users May Encounter Discrepancies Between Approved and Actual Executed Transactions
55 minutes ago
OneKey Security Team (OneKey Anzen) recently reproduced the Ledger vulnerability exposed by TestMachine, uncovering a transaction replacement flaw in Ledger’s Ethereum app version 1.22.1. When targeted, an attacked user’s hardware screen will still display transaction A they are reviewing, while the device may sign transaction B that the user never viewed. OneKey Anzen explained the issue stems from a race condition between transaction display logic and the underlying buffer, with the attack requiring the host side to be compromised by a malicious dApp or intermediate software. On August 22, TestMachine flagged a security vulnerability in leading crypto wallet Ledger. The following day, Ledger’s CTO responded that the fix had been rolled out approximately two weeks prior, advising the community to “avoid creating panic”. However, public records show Ledger’s official tag for version 1.22.2 on GitHub did not appear until August 24. As of press time, Ledger updated its official website, stating it resolved the problem via application-level checksums and the SDK layer, releasing Ledger Secure SDK v26.6.1 on August 21, with related apps rebuilt and re-released. Users must update via Ledger Live; updating only the device firmware is insufficient to complete the fix. Ledger added there is currently no evidence the vulnerability has been exploited in actual attacks.
Traders anticipating an escalation in the conflict flipped their positions overnight: they went short on $10 million worth of crude oil, and cut their Iran-exposed holdings by 75%.
1 seconds ago
ENA has rallied 119% from its lows over the past month, with a whale that positioned early notching a 776% return.
1 seconds ago
Ahead of Powell’s speech, internal divisions persist within the Federal Reserve, with some officials advocating for further interest rate hikes.
1 seconds ago
Meme coin roundup: AI-led rally surges over 50% to a new high; newly listed Solana (SOL) hot token FONE sees a nearly 700% price jump with $80 million in trading volume.
1 seconds ago
TIME’s 2026 AI 100 List: Jensen Huang and Liang Wenfeng Not Included, Yang Zhilin Makes the Cut for the First Time.
1 seconds ago
Bitget has launched stock contracts for HP (HPQ)
1 seconds ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

