![\"OneKey](\"https:\/\/s3-images.ctmedia.io\/media\/article-covers\/hi-how-great-big-companies-use-blockchain2.jpg\")
<\/p>\n<\/p>\n
OneKey said it reproduced an exploit against an older version of the Ledger app<\/a> in its lab environment, which Ledger fixed in its Ethereum app 1.22.2, with no user funds lost.<\/p>\n The in-house security team at open-source wallet provider OneKey said it successfully reproduced an exploit targeting an outdated version of Ledger\u2019s on-device Ethereum application in a test environment.<\/p>\n OneKey founder and CEO Yishi Wang said<\/a> they executed a \u201ctransaction replacement attack\u201d against Ledger Ethereum app 1.22.1 by exploiting a previously patched vulnerability that lets attackers overwrite the transaction waiting to be signed while the user is still reviewing the legitimate transaction.<\/p>\n Ledger said exploiting the vulnerability required control over communications between the device and its host, such as through malware, compromised wallet software or a hostile webpage. Ledger added app-level safeguards with Ethereum app 1.22.2 released on Aug. 13, before fixing the underlying issue in Secure SDK 26.6.1 on Aug. 21.<\/p>\n Read more<\/p>\n<\/p>\n If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n If you want to read more News<\/a> articles, you can visit our General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n\n