OneKey Reproduces Transaction-Replacement Attack in Older Ledger Ethereum App

OneKey said it reproduced a transaction-replacement exploit targeting an outdated version of Ledger’s Ethereum app in a controlled laboratory environment. According to the report published by Cointelegraph, Ledger addressed the issue in Ethereum app version 1.22.2. OneKey also said the testing did not result in any user funds being lost. The disclosure concerns the software used with Ledger devices to handle Ethereum transactions, rather than a reported loss affecting the Ethereum network itself. Users and market participants tracking ETH-related wallet security may note the importance of the fixed app version, although the supplied information does not specify the affected earlier release or provide further technical details about the exploit. No broader impact or additional incidents were reported in the source material.