A Newly Discovered Vulnerability in Ledger Wallet Could Be Disastrous If Not Properly Fixed

0

A recent report contends that the Ledger app has failed to fix a major vulnerability that allows for a “Bitcoin Fork” attack.

Mo Nokhbeh has claimed that Ledger’s wallet fails to properly isolate the apps responsible for authorizing the transactions of different assets. This creates a vulnerability where a user’s wallet can be fooled into authorizing a transaction for a less valuable asset — such as Litecoin (LTC), Bitcoin Cash (BCH) or any other Bitcoin fork coin — when in reality, a Bitcoin (BTC) transaction is being released. Nokhbeh told Cointelegraph:

“This app should be isolated such that it only signs for testnet derivation paths. However, sending it a regular mainnet bitcoin transaction will pass. In addition, it will present the TX as if it’s testnet bitcoin, to a testnet bitcoin address.”

According to Nokhbeh, he made Ledger fully aware of this vulnerability, and despite acknowledging it, the company has failed to fix it. Instead, they have chosen to release an update to their existing app that will provide users with a warning prompt if such an exploit is detected.

We have reached out to Ledger for comment and will update pending a response.

Source link

Leave A Reply

Your email address will not be published.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More

ethereum
Ethereum (ETH) $ 379.44 1.03%
chainlink
Chainlink (LINK) $ 10.96 0.73%
ampleforth
Ampleforth (AMPL) $ 1.03 0.41%
maker
Maker (MKR) $ 570.91 0.40%
compound-governance-token
Compound (COMP) $ 103.18 0.29%
havven
Synthetix Network Token (SNX) $ 3.78 4.81%
ethlend
Aave (LEND) $ 0.370715 8.09%
kyber-network
Kyber Network (KNC) $ 0.914856 0.88%
0x
0x (ZRX) $ 0.392384 0.82%
augur
Augur (REP) $ 13.64 0.35%
republic-protocol
REN (REN) $ 0.323347 4.97%
loopring
Loopring (LRC) $ 0.169711 4.02%
bancor
Bancor Network Token (BNT) $ 1.09 3.54%
yearn-finance
yearn.finance (YFI) $ 14,496.15 4.20%
band-protocol
Band Protocol (BAND) $ 6.10 4.68%
kava
Kava (KAVA) $ 1.99 3.53%
reserve-rights-token
Reserve Rights Token (RSR) $ 0.010633 8.06%