Back En.Bloomingbit

Ledger Patches Ethereum App Signing Flaw, Says Users on Latest Version Are Protected

En.Bloomingbit • August 24, 2026

Ledger has patched a security flaw affecting part of the signing process in its Ethereum app.

Wu Blockchain reported on August 24 that Ledger Chief Technology Officer Charles Guillemet said the company's security research team, Ledger Donjon, found the vulnerability in part of the app's clear-signing process and completed a fix two weeks ago.

Clear signing lets users review transaction details, including the recipient and amount, in a human-readable format before signing a blockchain transaction. The flaw was found in some signing flows that use that feature.

Users who keep their Ledger device firmware and related applications updated to the latest versions are protected from the vulnerability, Guillemet said.

He also criticized the way an external security firm disclosed the flaw. Guillemet said a company that identified itself as a smart-contract security firm disclosed the vulnerability after Ledger had completed the patch rollout and then suggested the issue had not been resolved.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ledger Ethereum App Vulnerability Allows Transaction Substitution Ledger has addressed a significant vulnerability in its Ethereum app that could allow malicious decentralized applications (dApps) to substitute legitimate transactions with harmful ones during the signing process. This flaw, identified by Ledger's internal security team, was patched in version 1.22.2 on August 12, 2026. Users who have updated their Ledger firmware and Ethereum app are protected, while those using outdated versions remain at risk. The vulnerability was disclosed publicly by the TestMachine security team on August 21, leading to confusion over the patch's availability. Ledger's CTO criticized the timing of the disclosure, emphasizing that the issue was resolved before it became widely known. The vulnerability affects all Ledger devices running the Ethereum app, including Nano X, Nano S Plus, Stax, and Apex. Users are urged to update their applications via Ledger Live to ensure security. 10 sources 34

Extracted Entities

Platforms (2)

Ethereum App Ledger Device Firmware