{"id":12328,"date":"2026-08-25T05:11:22","date_gmt":"2026-08-25T05:11:22","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=12328"},"modified":"2026-08-25T05:11:22","modified_gmt":"2026-08-25T05:11:22","slug":"ledger-patched-an-ethereum-app-bug-that-could-show-one-transaction-and-sign-another","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=12328","title":{"rendered":"Ledger patched an Ethereum app bug that could show one transaction and sign another"},"content":{"rendered":"<p><\/p>\n<div data-single-article-content=\"\">\n<p>Ledger users should update the Ethereum app to version 1.22.2 after official code changes showed that a malicious dApp or other connected host could start a second signing command while a transaction was still under review.<\/p>\n<p>In the path described by security company TestMachine, pressing approve could return a signature for substituted data instead of the transaction shown on the device.<\/p>\n<p>TestMachine said on Aug. 22 that the attack required a dApp with WebHID access. The group said a second command could replace the transaction held in memory without opening a new review, leaving the original details on screen while the device signed the replacement.<\/p>\n<p>It said the behavior was validated on Ledger Flex.<\/p>\n<p>Ledger\u2019s code history shows one official fix commit saying new signing commands could tear down an active review before returning an error. Another added state checks because approval callbacks previously signed without confirming that the app remained in the expected signing state.<\/p>\n<p>Version 1.22.2 closes that documented path by refusing a new signing session during an active review and rejecting an approval callback when the state no longer matches. The reviewed sources establish a code-level fix for those entry and callback defects.<\/p>\n<figure id=\"attachment_557617\" aria-describedby=\"caption-attachment-557617\" style=\"width: 720px\" class=\"wp-caption aligncenter\"><img fetchpriority=\"high\" decoding=\"async\" class=\"wp-image-557617\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867.png\" alt=\"Flowchart of the researcher-described Ledger Ethereum signing race and the two safeguards added in app version 1.22.2\" width=\"720\" height=\"1080\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867.png 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-200x300.png 200w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-683x1024.png 683w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-768x1152.png 768w\" sizes=\"(max-width: 720px) 100vw, 720px\"\/><img decoding=\"async\" class=\"lazyload wp-image-557617\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867.png\" alt=\"Flowchart of the researcher-described Ledger Ethereum signing race and the two safeguards added in app version 1.22.2\" width=\"720\" height=\"1080\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867.png 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-200x300.png 200w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-683x1024.png 683w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/08\/exec-ecd4f35e-f2d5-4e46-bd4c-166821b91867-768x1152.png 768w\" data-sizes=\"(max-width: 720px) 100vw, 720px\"\/><figcaption id=\"caption-attachment-557617\" class=\"wp-caption-text\">Diagram showing the signing-state race described for Ledger\u2019s Ethereum app and the safeguards added in version 1.22.2.<\/figcaption><\/figure>\n<p>TestMachine asserted that shared code extended the issue to Nano X, Nano S Plus, Stax, and Apex, and the tagged app manifest lists those models alongside Flex as build targets.<\/p>\n<aside id=\"cs-inline-newsletter-1\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\" data-newsletter-placement=\"article-midpoint\" data-newsletter-pending-label=\"Joining\u2026\" data-newsletter-pending-status=\"Joining the Daily Brief\u2026\" data-newsletter-email-required-message=\"Before sending, please provide your email address.\" aria-labelledby=\"cs-inline-newsletter-1-title\" aria-describedby=\"cs-inline-newsletter-1-copy\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\"> <i class=\"fa-regular fa-envelope\" aria-hidden=\"true\"\/> The Daily Brief <\/span><\/p>\n<h2 id=\"cs-inline-newsletter-1-title\" class=\"cs-inline-newsletter__title\">The signal, before the noise.<\/h2>\n<p id=\"cs-inline-newsletter-1-copy\" class=\"cs-inline-newsletter__copy\">Start your day with the crypto stories moving markets, decoded by CryptoSlate\u2019s editors.<\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__form-heading\">One email. Everything that matters.<\/p>\n<p id=\"cs-inline-newsletter-1-privacy\" class=\"cs-inline-newsletter__privacy\">Free to join. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span><strong>You\u2019re on the list.<\/strong> Your next Daily Brief is on its way.<\/span><\/p>\n<\/div>\n<\/div>\n<\/aside>\n<p>Ledger\u2019s release comparison starts from version 1.22.1, while the earliest affected app release remains undisclosed.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">A 7 year Ledger bug lets attackers rebuild a private key from five signatures in seconds<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>Ledger\u2019s changelog dates 1.22.2 to Aug. 12, GitHub shows the signed tag on Aug. 13, and TestMachine said on Aug. 22 that the fix was not yet released.<\/p>\n<p>Ledger CTO Charles Guillemet said on Aug. 23 that Ledger Donjon had found a bug in \u201ccertain clear signing flows\u201d and deployed the fix about two weeks earlier. The sources leave open whether TestMachine was referring to distribution through Ledger Wallet.<\/p>\n<p>Guillemet said Donjon found the bug before TestMachine contacted Ledger\u2019s bounty program, while TestMachine said its Azimuth system found the issue and that it shared and verified the finding with Ledger.<\/p>\n<p>Users should confirm that Ethereum app 1.22.2 is installed. Guillemet also advised keeping device firmware, apps, and client software current, although the public sources give no firmware minimum specific to this flaw.<\/p>\n<p>They report no confirmed in-the-wild exploitation, lost funds, or private-key extraction.<\/p>\n<p>The issue is separate from the native Zilliqa Ledger app flaw involving Schnorr nonce leakage and the 2023 Connect Kit compromise, which involved a malicious JavaScript library and reported losses.<\/p>\n<\/div>\n<p>Featured,Hacks,Technology,Wallets,ethereum,Ledgerethereum,Ledger#Ledger #patched #Ethereum #app #bug #show #transaction #sign1787634682<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ledger users should update the Ethereum app to version 1.22.2 after official code changes showed that a malicious dApp or other connected host could start a second signing command while a transaction was still under review. In the path described by security company TestMachine, pressing approve could return a signature for substituted data instead of<\/p>\n","protected":false},"author":1,"featured_media":12329,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[2538,4425,31,829,6483,368,2323,2940],"class_list":["post-12328","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-app","tag-bug","tag-ethereum","tag-ledger","tag-patched","tag-show","tag-sign","tag-transaction"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Ledger patched an Ethereum app bug that could show one transaction and sign another - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=12328\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ledger patched an Ethereum app bug that could show one transaction and sign another\" \/>\n<meta property=\"og:description\" content=\"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=12328\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-25T05:11:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=12328\",\"name\":\"Ledger patched an Ethereum app bug that could show one transaction and sign another - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg\",\"datePublished\":\"2026-08-25T05:11:22+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=12328\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=12328#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ledger patched an Ethereum app bug that could show one transaction and sign another\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ledger patched an Ethereum app bug that could show one transaction and sign another - Crypto News: Latest Cryptocurrency News and Analysis","description":"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=12328","og_locale":"en_US","og_type":"article","og_title":"Ledger patched an Ethereum app bug that could show one transaction and sign another","og_description":"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.","og_url":"https:\/\/cryptonews.uk.com\/?p=12328","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-08-25T05:11:22+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=12328","url":"https:\/\/cryptonews.uk.com\/?p=12328","name":"Ledger patched an Ethereum app bug that could show one transaction and sign another - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg","datePublished":"2026-08-25T05:11:22+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=12328#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=12328"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=12328#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/08\/ledger-ethereum-update-warning.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=12328#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Ledger patched an Ethereum app bug that could show one transaction and sign another"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12328","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12328"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/12328\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/12329"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12328"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12328"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}