A latest report contends that Ledger App has failed to repair a serious vulnerability that enables for a “Bitcoin Fork” assault.Mo Nokhbeh claims L
A latest report contends that Ledger App has failed to repair a serious vulnerability that enables for a “Bitcoin Fork” assault.
Mo Nokhbeh claims Ledger’s pockets fails to correctly isolate the apps accountable for authorizing the transactions of various belongings. This creates a vulnerability the place a person’s pockets may be fooled into authorizing a transaction for a much less invaluable asset, like Litecoin (LTC), Bitcoin Money (BCH) or some other Bitcoin fork coin, the place in actuality, a Bitcoin (BTC) transaction is being launched. Nokhbeh instructed Cointelegraph:
“This app must be remoted such that it solely indicators for testnet derivation paths. Nonetheless, sending it an everyday mainnet bitcoin transaction will move. As well as, it’ll current the TX as if it is testnet bitcoin, to a testnet bitcoin handle.”
In response to Nokhbeh, he made Ledger absolutely conscious of this vulnerability and regardless of acknowledging it, the corporate has failed to repair it. As a substitute they’ve chosen to launch an replace to their present app which is able to present customers with a warning immediate if such an exploit is detected.
We now have reached out to Ledger for remark and can replace pending a response.