Ledger Chief Technology Officer Charles Guillemet said recent claims about a vulnerability in the company’s Ethereum app relate to a real bug that had already been fixed and deployed two weeks ago. In a post on X, he said the issue involved a specific clear-signing flow and was discovered internally by Donjon, Ledger’s security team, using an AI-based vulnerability research tool. Guillemet added that users are protected as long as they keep their Ledger app updated. He also said the smart contract security firm tied to the claims contacted Ledger’s bug bounty program only after the fix had gone live and did not follow responsible disclosure practices. According to Guillemet, that firm later published posts implying the issue remained unresolved. He criticized the move as an attempt to stir fear and draw attention rather than conduct legitimate security research.
Ledger Chief Technology Officer Charles Guillemet said recent rumors about a vulnerability in the company’s Ethereum app refer to a bug that was real, but had already been fixed and deployed two weeks ago.
In a post on X, Guillemet said the issue involved a specific clear-signing flow. He said it was discovered by Donjon, Ledger’s internal security team, using an AI vulnerability research tool. Users are protected as long as they keep their Ledger app updated, he added.
Guillemet also said the smart contract security company connected to the claims reached out to Ledger’s bug bounty program only after the fix was live and did not follow responsible disclosure principles. He said the firm later published posts suggesting the issue was still unresolved, and criticized that behavior as fearmongering aimed at attracting attention rather than genuine security research.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
