According to CoinMeta, after the security team at OneKey reproduced the vulnerability in their Ethereum application, Ledger denied any claims of being hacked. On August 27th, founder Wang Yi stated that researchers had successfully carried out an attack on Ethereum application version 1.22.1 in a laboratory setting. Ledger acknowledged the potential vulnerability but claimed that the affected applications had been patched before a demonstration was released on OneKey. The flaw involved communication between Ledger devices and their connected hosts, which could lead to new instructions overwriting stored signature parameters when users viewed previous operations. Ledger categorized this issue as a race condition between time checks and the actual usage of time. Although the defect did not result in the exposure of mnemonic phrases or the extraction of private keys, it could potentially cause protected keys to sign parameters that differ from what users see. Ledger recommends that users update to Ethereum application version 1.22.3 or later for enhanced protection.