Ledger CTO says rumored Ethereum app bug was fixed two weeks ago

Ledger Chief Technology Officer Charles Guillemet said recent claims about a vulnerability in the company’s Ethereum app relate to a real bug that had already been fixed and deployed two weeks ago. In a post on X, he said the issue involved a specific clear-signing flow and was discovered internally by Donjon, Ledger’s security team, using an AI-based vulnerability research tool. Guillemet added that users are protected as long as they keep their Ledger app updated. He also said the smart contract security firm tied to the claims contacted Ledger’s bug bounty program only after the fix had gone live and did not follow responsible disclosure practices. According to Guillemet, that firm later published posts implying the issue remained unresolved. He criticized the move as an attempt to stir fear and draw attention rather than conduct legitimate security research.