Vulnerability Fixed: Ledger Ethereum App Users Protected After Updating Device Firmware and Apps

Odaily News: Ledger CTO Charles Guillemet stated that a smart contract security company recently claimed to have discovered a vulnerability in the Ledger Ethereum app. The Ledger Ethereum app did indeed have a vulnerability related to some Clear Signing processes, but it was discovered by Ledger's security research team, Donjon, using an AI-driven vulnerability research tool, and was fixed and deployed two weeks ago. The security company contacted Ledger's bug bounty program only after the fix was completed, did not follow the responsible disclosure process, and did not communicate with the bug bounty team. It then published content implying that the issue remained unresolved. Guillemet said that users who promptly update their Ledger device firmware, Ledger apps, and related software will receive the latest security fixes.