# A Race Condition Let a Ledger Device Sign a Transaction Different From the One on Its Screen

Ledger patched the Ethereum application on August 12, before researchers at OneKey disclosed the flaw, and says no losses have been reported.

- Published: 2026-08-28T05:39:41.604Z
- Canonical: https://polylog.news/crypto/2026-08-28/a-race-condition-let-a-ledger-device-sign-a-transaction-diff
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Polylog editors](https://polylog.news), [Bitcoin Magazine](https://bitcoinmagazine.com/business/coinkites-coldcard-bug-exposed-single-sig-risk-multi-vendor-multisig-is-the-new-bitcoin-custody-baseline), [Rekt News](https://www.rekt.news/)

The security team at OneKey, a competing hardware-wallet maker, says it reproduced a transaction-replacement attack against version 1.22.1 of Ledger's Ethereum application. The defect is a race condition between the code that renders transa…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-08-28/a-race-condition-let-a-ledger-device-sign-a-transaction-diff (subscription information: https://polylog.news/pricing).