Application Security

Ledger Quietly Patched Ethereum App Race Flaw That Could Swap Transactions

The update closed an APDU timing path that could let a connected host replace a transaction and has prompted debate over how and when security fixes are disclosed.