### Executive Summary
- Security researchers at OneKey successfully demonstrated a transaction-replacement exploit targeting Ledger’s Ethereum application, specifically version 1.22.1.
- Ledger has clarified that this security flaw was addressed in version 1.22.2, prior to the public disclosure, and confirms no user funds have been compromised.
- To maintain optimal security, Ledger advises all users to verify their device firmware and update their Ethereum application to version 1.22.3 or newer.
### Understanding the Ledger Security Allegations
Recent reports circulating in the crypto community regarding a potential Ledger security breach have been officially refuted by the hardware wallet manufacturer. The confusion stemmed from a technical demonstration by OneKey, a competing wallet provider, which showcased how a transaction-replacement attack could be executed against an obsolete version of Ledger’s Ethereum software.
Yishi Wang, the CEO of OneKey, detailed the findings on X (formerly Twitter), noting that the Anzen security research division successfully replicated the exploit within a controlled laboratory environment.
Myriad: Ethereum next price move? Click to make your prediction.
### The Mechanics of the Vulnerability
The core of the issue lies in a “race condition” flaw. According to Wang, the vulnerability exists in the synchronization between the transaction display interface and the internal transaction buffer.
In a hypothetical attack scenario, if a malicious actor were to gain control over the software interface interacting with a vulnerable Ledger device, they could potentially manipulate the data. While a user is busy reviewing what they believe to be a safe, legitimate Ethereum transaction on their screen, the attacker could silently overwrite the pending transaction in the buffer. This creates a discrepancy between what the user approves and what is actually broadcast to the blockchain.
### Ledger’s Response and User Safety
Ledger has been proactive in addressing these concerns, emphasizing that the vulnerability was identified and patched in version 1.22.2, well before OneKey’s public disclosure. The company maintains that there is no evidence of this exploit being utilized against their user base in the wild.
As the landscape of digital asset security evolves-with recent data suggesting that hardware wallet users remain the primary target for sophisticated phishing and supply chain attacks-maintaining updated software is critical. Ledger strongly urges all users to perform a manual check of their device’s app version. To ensure your assets are protected against this and other potential race-condition vulnerabilities, please update your Ethereum application to version 1.22.3 or higher immediately.
