Ledger Fixes Ethereum App Flaw as Disclosure Timeline Is Disputed

A disputed clear‑signing vulnerability in Ledger’s Ethereum app was reported by security firm TestMachine, which said its AI scanner validated a race-condition attack that could display one transaction on-device while preparing another for signing. Ledger’s CTO and internal Donjon team say the issue was independently identified and patched two weeks before public disclosure, but GitHub release tags and a formal advisory are missing, no verified fund theft has been reported, and the disclosure timeline remains unresolved.