OneKey reproduces exploit on outdated Ledger Ethereum app

This reproduction validates the severity of the flaw while underscoring that the risk window has closed for updated users. The real signal is the widening gap between hardware wallet security claims and the practical need for users to keep firmware and apps current. For the broader market, it highlights that even trusted cold-storage devices depend on a patch discipline that many owners neglect. The open question is whether this prompts a shift toward more aggressive automatic update mechanisms or clearer warnings for outdated versions, as the attack surface for legacy setups remains a persistent concern.