OneKey and Ledger dispute severity of patched Ethereum app vulnerability

Hardware wallet manufacturers OneKey and Ledger are engaged in a public dispute over the severity and framing of a security vulnerability that was patched in an older version of Ledger's Ethereum application. The conflict centers on a demonstration by OneKey's security team, which successfully reproduced a transaction replacement attack against Ledger Ethereum app version 1.22.1 in a controlled lab environment. OneKey founder and CEO Yishi Wang announced the reproduction on August 27, stating his team exploited a race condition in the outdated app.