sec_₿sec.21ideas.org
Ledger
Patch availableHodlers27 August 2026

Ledger issues three firmware security bulletins in one day

Ledger Donjon has published three bulletins about hardware wallet firmware: the screen becoming out of sync with the data being signed when commands are interleaved during on-screen verification, a clear-signing bypass through array counter truncation, and accepting a token approval in place of a payment in a swap. Patches are already available.

Actions to take

Update the device firmware and Ledger Live to the latest version before signing your next transaction.