OneKey tái tạo cuộc tấn công thay thế giao dịch trên ứng dụng Ethereum của Ledger phiên bản 1.22.1

The Huoxing Finance report states that OneKey’s security team successfully replicated an exploit targeting the older version of the Ledger Ethereum app in a laboratory environment. Wang Yishi, founder and CEO of OneKey, said they executed a “transaction replacement attack” on Ledger Ethereum app version 1.22.1 by exploiting a previously patched vulnerability, allowing attackers to overwrite transactions awaiting signature while users review legitimate transactions. Ledger responded that exploiting this vulnerability requires control over communication between the device and host, such as through malware, compromised wallet software, or malicious websites. Ledger added application-layer protection in the Ethereum app 1.22.2 released on August 13 and fixed the underlying issue in Secure SDK 26.6.1 on August 21. Ledger emphasized that no users have been hacked and this was purely a laboratory-based vulnerability replication. This security test occurred following the Coldcard vulnerability incident. Previously, Coldcard wallets had a firmware vulnerability that posed security risks to some mnemonic generation processes, but Ledger stated its devices were unaffected because recovery phrases are generated by an authenticated random source embedded in the device’s secure chip. The vulnerability replicated by OneKey is unrelated to mnemonic generation and instead affects how transactions are handled during the signing process.