Ledger Closes a Gap in the Ethereum App: When the Display Shows Something Other Than What You Sign

Anyone who owns a Ledger and uses it to manage Ether or ERC-20 tokens should open Ledger Live and check which version of the Ethereum app is installed on the device. Anything older than 1.22.2 is missing a security fix. That fix closes a flaw which undermined the very promise a hardware wallet is bought for: that the screen shows what the device is about to sign. The case became public on August 24, 2026, when the security firm TestMachine published its analysis. The fix itself already existed by that point. Between the two dates lies a dispute over who found the flaw first and when Ledger shipped it. For you as an owner, that dispute is secondary. What matters is the version number on your device and the question of which approvals you granted in the past. Ledger security vulnerability in the Ethereum app: what actually happened Neither the device firmware nor the custody of the private key was affected. The problem sat in the Ethereum app: the small piece of software you install on the device in addition, for Ether and ERC-20 tokens. It prepares a transaction, displays it to you and collects your confirmation. In the faulty version, that sequence could be thrown out of order. A m...