AI Firm Exposes Ledger Bug, CTO Calls It Fear-Mongering After Quiet Fix

An artificial intelligence (AI) security firm went public with a Ledger Ethereum app bug. Ledger says it had already fixed the flaw quietly, two weeks earlier. Chief technology officer Charles Guillemet called the disclosure fear-mongering.

The patch shipped on August 12 with a one-line note and no security bulletin. What the Ledger Ethereum App Bug Actually Did Ledger sells one core promise. The screen shows you what you are signing. That promise has a name.

Ledger calls it clear signing, and it turns raw transaction code into plain words on the device screen. TestMachine says it found a way around that. The firm builds an AI agent called Azimuth that hunts exploits in smart contracts.

On its own EVMBench benchmark, Azimuth catches 86.3% of known bugs with roughly 2.7% false positives. Found by Azimuth during an autonomous scan of the Ledger Ethereum app. Validated on Flex. Shared and verified with the team. Declining any bounty.