Ledger Denies Hack Claims as Patched Ethereum App Vulnerability Comes to Light

Ethereum (ETH) Editor: Eugene Serbin

Ledger has rejected allegations of a security breach after rival firm OneKey demonstrated a vulnerability in its Ethereum application. According to crypto-economy.com, the issue was identified and patched in version 1.22.2, which was released on August 13, prior to the public disclosure on August 27. OneKey CEO Yishi Wang explained that the flaw stemmed from a race condition between the data buffer and the device's visual interface.

This allowed an attacker controlling the intermediary software to overwrite a transaction while the user reviewed the legitimate operation on screen. Ledger CTO Charles Guillemet clarified that reproducing a bug in an obsolete version does not constitute an active vulnerability or a compromise of user funds. The company rolled out update 1.22.2 to reject new signing sessions during reviews and void confirmations if memory states differ from the screen display.

On August 21, the Secure SDK was updated to version 26.6.1 to rebuild the application catalog and prevent similar vectors. The August 27 bulletin noted that the attack required the host computer to be compromised or connected to a malicious web platform. Private keys stored in the secure element were never exposed during the incident. Users are advised to check Ledger Live for version 1.22.3 or higher to ensure device protection.

How the market reacted

Whalio's own Binance spot order flow for ETH, measured when this story was written up on 28 August 2026. Not the outlet's figures.

Price
$2,510.94
Buy Ratio (1h)
49.5%
Buy Ratio (4h)
51.2%
Buy Ratio (24h)
48.6%
Volume Delta (1h)
-$159,226
Volume Delta (4h)
+$1,629,811
Volume Delta (24h)
-$22,699,506
CVD (24h close)
-$23,027,631
Hours of net buying
6 of 24
Spot Volume (24h)
$846,470,842
Trades (24h)
3,426,529

ETH is trading at $2,510.94 with a 1-hour buy ratio of 49.5% and a 4-hour buy ratio of 51.2%, indicating a near-even split in immediate buying pressure. Over the last 24 hours, the buy ratio sits at 48.6%, suggesting that selling pressure has slightly outweighed buying over the longer timeframe. The 1-hour volume delta is negative at -$159,226, showing recent net outflows, while the 4-hour delta is positive at +$1,629,811, reflecting earlier net inflows. The 24-hour volume delta is -$22,699,506, and the cumulative volume delta (CVD) closed at -$23,027,631, confirming that sellers have dominated the day's activity. Net buying occurred for only 6 out of 24 hours, with total spot volume reaching $846,470,842 across 3,426,529 trades.

The latest daily buy ratio of 46.8% sits at the 16th percentile of the last 322 days, against a median of 49.5% - weaker buying than most days.

Twenty-four hours later

What ETH did over the 24 hours after the story broke. The market moves for its own reasons; this is what happened, not what the story caused.

Price
-2.71%
Buy ratio
46.3%
Volume delta
-$65,711,416
Hours of net buying
8 of 24

Was that an ordinary day?

The same Binance spot measurements for ETH, averaged over the days leading up to the story.

Buy Ratio (7d average)
51.3%
Latest day vs average
-2.6 pts
Volume vs average
0.74x
Days of net buying
6 of 7
Price change (8d)
+7.9%
Volume Delta (8d total)
+$248,748,632

Over the preceding week, the 7-day average buy ratio was 51.3%, meaning today's 24-hour ratio of 48.6% is 2.6 points below the weekly norm. Trading volume today was 0.74x the weekly average, indicating a quieter day than usual. The coin saw net buying on 6 of the past 7 days, with a total volume delta of +$248,748,632 over that period. Price increased by 7.9% over the 8-day window, contrasting with the current day's net selling pressure. This represents a shift from the generally bullish flow seen earlier in the week to a more balanced, slightly bearish intraday dynamic.

More on ETH