Ledger CTO: Ethereum App Vulnerability Patched Two Weeks Ago, Users Should Update and Ignore FUD

Ledger's Chief Technology Officer disclosed that a vulnerability affecting the Ethereum app's signing processes has already been resolved, with the patch deployed roughly two weeks prior to the public announcement. Guillemet urged users to apply the update and disregard surrounding speculation. The vulnerability, which concerned the signing flow mechanism within the Ethereum application, posed a potential security risk that the hardware wallet firm addressed through its standard patching procedures before broader disclosure.

The timing suggests Ledger handled the issue through responsible disclosure rather than leaving users exposed for an extended period. Guillemet's direct messaging appears aimed at countering alarm among the user base over what he characterized as unwarranted concern given the fix's availability.

• Ledger patched an Ethereum app signing vulnerability approximately two weeks before publicly addressing it, indicating proactive internal security response.
• The CTO framed the disclosure as addressing "FUD" rather than an active threat, suggesting users who update face minimal risk.
• No indication the vulnerability was exploited in the wild or affected user funds prior to patching.