OneKey founder says the team reproduced a lab attack on Ledger’s Ethereum app version 1.22.1, allowing a transaction to be silently swapped right before signing. The user would see and confirm transaction A, while Ledger could sign unseen transaction B; Ledger has already fixed the issue in version 1.22.3 and users are advised to update.
Crypto TV
