Skip to content

Ledger / Public disclosure

Monero app secret-key exposure

View and spend keys could be exposed without a new confirmation.

Source date: 2026-06-04Reviewed: 11 October 2026

Affected scope

Monero app before 2.1.4

What the attack requires

Compromised host; unlocked device with Monero app open.

Response & remediation

What changed

Monero app 2.1.4, released March 20.

What this finding establishes

The affected component is the Monero app. The finding does not establish a compromise of every Ledger app or device.