OneKey recreates the old version of Ledger's trade-replacement gap at the lab

According to Cointelegraph, the OneKey security team reproduced the old version of Ledger's trading replacement gap with the Taifeng application. The loophole allows the assailant to replace the pending signature transaction at the time of user clearance, under conditions including control of the equipment and mainframe communication. Ledger added application-level protection to the Ether application, published on 13 August, and repaired the bottom problem in Secure SDK 26.6.1 on 21 August. Ledger states that the loophole did not result in a loss of user funds。