RWA Security firm OneKey revealed that an outdated Ethereum app could trick users into signing a different transaction than displayed on a Ledger device, but Ledger confirmed the vulnerability was already patched before any exploit occurred. The company emphasized that no hardware was compromised and users are safe if they update their apps.