Ledger, one of the leading producers of cryptocurrency hardware wallets, announced on Friday that a bug was found in the Ethereum Chrome wallet application, resulting in the transfer of user funds to a different ETH address than the one specified.
Ledger Bug App Ethereum Chrome Wallet
The bug, which was discovered in the Ledger Wallet's Ethereum Chrome App app update launched Thursday, caused a static address of the recipient to all users instead of the address of the actual recipient. As a result, many wallet users have discovered that their ETH token, ETC and some ERC20 token transactions never reached their intended destinations.
Currently there is a problem in Ledger Wallet's Ethereum Chrome application, which shows a static address on the screen (same for all users). This seems more like a bug than a compromise. We are working on it, we will know it soon. PLEASE USE ONLY LEDGER LIVE / MEW MEANWHILE
– Ledger (@LedgerHQ) 3 August 2018
According to Ledger, the problem has affected transactions within the Ethereum app between 8 pm CET on Thursday and 10:00 CET on Friday. They report that about 64 transactions were affected, however Etherscan shows an additional 15 transactions, a total of 82. At the time of writing this document, the ETH address displayed erroneously received about 243.6 ETH – $ 98.595 at prices currents – and an additional $ 17.635 in various ERC20 tokens.
Where do the 12 additional transactions come from? Were they related to the bug problem? The static ETH address could be an address used to test the update that somehow was not removed before publication? We hope that Ledger will be able to answer these questions in the coming days.
The ledger to compensate 100% of the losses of interested users
Fortunately, apart from the user funds sent to the wrong address, the damage was relatively minimal. Ledger immediately pointed out that ONLY the 1.3.0 version of the Led Ethereum app Chrome App was affected by the bug. All other Ledger Wallet Chrome apps – as well as Ledger Live – have not been affected. If there is good news to be found in this situation, it is that Ledger has learned about the problem quickly and has taken measures to limit losses to users. Not only that, but the company has announced that it will cover 100% of user losses related to the problem:
. We confirm that this is a bug in the Chrome app, coming from a side effect when we sent an update to invite users to use the Ledger Live instead of the Chrome app. A wrong address was shown on the computer. Ledger will cover 100% of all losses due to the problem.
– Ledger (@LedgerHQ) 3 August 2018
Users who have suffered losses due to the bug should go to the support page of the company Ledger and select "Something not it worked with the Chrome ETH app " from the drop-down form field. Complete the form and click on the Submit button and someone from the Ledger support team will be in touch with you.
The Ledger board warns users of the Ethereum Chrome app to make sure you upgrade to the updated patched version. To do this, all you need to do is turn off the Chrome browser and restart it. The application will automatically install the patched update.
In light of the fact that Google will stop Chrome's apps by the end of the year, Ledger strongly recommends switching to Ledger Live, the new all-in-one companion application for your Ledger device that works on Windows, Mac and Linux. "
Have you been influenced by the bug of the Ledger Wallet Ethereum Chrome app? What do you think of the way in which Ledger handled the situation? Let us know in the comments below .
Images courtesy of Etherscan, Ledger