@testmachine_ai: Ledger Ethereum app vulnerable to signature substitution

mishaderidder.eth · 2026-08-23T21:57:37.000Z

🚨Every Ledger running the Ethereum app is vulnerable to signature substitution A malicious dApp with WebHID access could race an APDU during your transaction review and swap the tx being signed while the device still shows the original Here's what you need to know:

Back

Join our TG SubmitDisconnect

@testmachine_ai: Ledger Ethereum app vulnerable to signature substitution

by mishaderidder.eth12889 🥝 • 8h •

x.com

Characters remaining: 10,000

comment guidelines