TREE NEWS update: Ledger clarified it was not hacked, as OneKey’s demonstration of a vulnerability in an outdated Ethereum app was already patched. The exploit could have signed transactions different from those displayed on the device, but the fix was deployed prior to the disclosure.
Ledger Says Vulnerability Patched Before Exploit
This episode underscores how supply-chain and device-level risks are often pre-empted by vendors, but the gap between patch deployment and public disclosure remains a critical window. The fact that the exploit targeted outdated software highlights a broader operational risk for users who lag on updates, even if the hardware itself was not breached. For the market, the key signal is whether such third-party demonstrations become a recurring audit mechanism, potentially forcing faster disclosure timelines across the industry. What matters next is how other hardware wallet makers respond to similar scrutiny, as trust in device integrity is foundational to custody narratives.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.