OneKey Reproduces Transaction Replacement Attack on Old Ledger Ethereum App

This reproduction of a transaction replacement attack on the legacy Ledger Ethereum app underscores how dated software becomes a liability in crypto infrastructure. The significance lies not in the attack's novelty but in its targeting of users who delay updates, highlighting a persistent gap between security patches and user adoption. It affects anyone still running older Ledger firmware or apps, as the signing process can be manipulated, undermining the hardware wallet's core promise of tamper-proof transactions. The open question is whether this prompts a broader industry push for mandatory update mechanisms or if legacy support will continue to create similar exposure.