Ledger Says Ethereum Clear-Signing Flaw Was Fixed Two Weeks Ago

Ledger said it fixed a vulnerability affecting certain clear-signing flows in its Ethereum app two weeks ago, according to Chief Technology Officer Charles Guillemet.

Guillemet said Ledger Donjon discovered the issue and that users running up-to-date Ledger firmware and applications are protected.

He also said a firm describing itself as a “smart contract security” company disclosed the vulnerability only after Ledger had deployed the fix. According to Guillemet, the firm later suggested that the issue remained unresolved.

Source: Charles Guillemet