RWA OneKey has successfully reproduced a transaction replacement attack targeting the old Ledger Ethereum app, highlighting a critical security vulnerability. This attack could potentially mislead users into signing malicious transactions, posing significant risks to fund safety. Users are urged to update their Ledger firmware and apps immediately.