Ledger CTO Responds to Rumors of Vulnerability: Bug Fixed Two Weeks Ago

Foresight News reports that Charles Guillemet, Chief Technology Officer of hardware wallet company Ledger, responded via Twitter to recent rumors regarding a "Ledger Ethereum application vulnerability." He stated that there was indeed a bug related to a specific signing process, which was discovered by Ledger's security team Donjon using AI vulnerability research tools. The issue was fixed and deployed two weeks ago. Users are protected as long as they keep their Ledger application updated. A related "smart contract security company" contacted the team about the bounty program only after the fix was deployed and did not adhere to responsible disclosure principles. Subsequently, they published a post implying the issue was still unresolved. Guillemet criticized this action as creating panic to gain attention rather than conducting genuine security research.