Ledger Chief Technology Officer Charles Guillemet said the company’s Ethereum app did previously have a vulnerability tied to parts of the Clear Signing process, but the issue has already been fixed and deployed. According to Guillemet, the flaw was identified by Donjon, Ledger’s internal security research team, using an AI-driven vulnerability research tool, and the remediation was completed two weeks ago. He also said a smart contract security company that recently claimed to have found the bug only contacted Ledger’s bug bounty program after the fix had already been completed. Guillemet said that firm did not follow a responsible disclosure process, did not communicate with the bug bounty team, and later published material suggesting the issue was still unresolved. He added that users who promptly update their Ledger device firmware, the Ledger app, and related software will receive the latest security protections. The statement addresses recent claims around the Ethereum app and frames the issue as already remediated for users who install the available updates.
Ledger Chief Technology Officer Charles Guillemet said a smart contract security company recently claimed to have found a vulnerability in Ledger’s Ethereum app.
Guillemet said the Ethereum app did previously contain a flaw related to parts of the Clear Signing process. He said the issue was discovered by Donjon, Ledger’s security research team, through an AI-driven vulnerability research tool, and that the fix was completed and deployed two weeks ago.
He also said the security company contacted Ledger’s bug bounty program only after Ledger had already finished the remediation. According to Guillemet, the firm did not follow responsible disclosure practices, did not communicate with the bug bounty team, and later published material implying that the issue was still unresolved.
Guillemet said users who update their Ledger device firmware, the Ledger app, and related software will receive the latest security fix.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
