OneKey Reproduces Ledger Ethereum App Flaw Fixed in v1.22.2
Ethereum (ETH)
Editor:
Eugene Serbin
newsbitcoin.cash reports that OneKey successfully reproduced a transaction replacement attack against an older version of the Ledger Ethereum application in a controlled lab environment. The vulnerability, which allows a pending transaction to be substituted before on-chain confirmation, could potentially manipulate recipient addresses or contract interactions if not caught by the wallet's verification layer. OneKey confirmed that Ledger has already patched this specific exposure in Ethereum app version 1.22.2, and no user funds were lost during the demonstration.
The disclosure highlights that any device running an Ethereum app version older than 1.22.2 remains technically exposed to this class of manipulation. While Ledger Live users are urged to update, those who rarely connect their devices may still be running vulnerable configurations. This responsible disclosure occurred without any active in-the-wild attacks or compromised assets, demonstrating the security research pipeline functioning as intended.
The hardware wallet market has expanded significantly as participants move assets off exchanges, making the software stack between user intent and signed transactions critical. OneKey’s lab reproduction serves as proof-of-concept evidence that the attack vector functioned under conditions mimicking a genuine user environment. The company’s decision to disclose the flaw while competing directly with Ledger reflects a security philosophy that benefits the broader self-custody ecosystem. Users are advised to check their Ethereum application version in Ledger Live and update to 1.22.2 or higher to secure their devices.
How the market reacted
Whalio's own Binance spot order flow for ETH, measured when this story was written up on 28 August 2026. Not the outlet's figures.
ETH is trading at $2,510.94 with a 1-hour buy ratio of 65.9%, indicating strong immediate buying pressure that contrasts with the 4-hour ratio of 46.7%. The 1-hour volume delta is positive at +$6,722,840, suggesting recent accumulation, whereas the 4-hour delta is negative at -$5,080,929. Over the last 24 hours, the buy ratio sits at 48.6% with a cumulative volume delta of -$22,699,506 and a CVD of -$49,181,330. The buy ratio measures the proportion of buy volume relative to total volume, while the volume delta tracks the net difference between buy and sell pressure. Short-term flows show aggressive buying, but the broader 24-hour trend remains net negative as selling pressure has outweighed buying over the longer timeframe.
The latest daily buy ratio of 46.8% sits at the 16th percentile of the last 322 days, against a median of 49.5% - weaker buying than most days.
Twenty-four hours later
What ETH did over the 24 hours after the story broke. The market moves for its own reasons; this is what happened, not what the story caused.
Was that an ordinary day?
The same Binance spot measurements for ETH, averaged over the days leading up to the story.
Over the preceding week, the 7-day average buy ratio was 51.3%, making the current 24-hour ratio of 48.6% slightly below the weekly norm by 2.6 percentage points. Weekly volume was 0.74x the average, indicating that trading activity has been lighter than usual over the past seven days. The coin saw net buying on 6 of the last 7 days, with a total 8-day volume delta of +$248,748,632 and a price increase of 7.9% over the period. This represents an ordinary pattern of sustained buying interest, though today’s volume is notably subdued compared to the weekly baseline. The current session’s lower volume and mixed delta suggest a pause in the momentum that characterized the previous week.