Seems like Ledger finally published a security advisory[0]. It also seems like they finally accepted OP's bug report as part of their bounty program. [0]: htt

Seems like Ledger finally published a security advisory[0]. It also seems like they finally accepted OP's bug report as part of their bounty program. [0]: https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-security-fixes/ https://www.ledger.fr/2018/03/20/firmware-1-4-deep-dive-secu...