Bug with Monero on Ledger 0.14 client

[gentlemand]

https://www.reddit.com/r/Monero/comments/ax0pqt/alert_stop_using_ledger_with_014_client/?sort=confidence

All you Monero fans need to check yourselves before you wreck yourselves.

There seems to be a bug with change addresses that could mean whatever's sent there is lost.

[o_e_l_e_o]

Here is the post on the Ledger subreddit:

https://www.reddit.com/r/ledgerwallet/comments/awyj7m/there_is_a_bug_in_your_monero_wallet_i_may_ahve/

Looks like the unlucky user in question has currently lost somewhere in the region of 1680 Monero ($80,000). The question is whether his wallet just isn't syncing properly with the change addresses, or whether there was a bug in deriving the change addresses, meaning he has just sent 1680 Monero to an address no one can access. The Ledger team are already involved and working on it, by the looks of things.

But yeah, if you are using a Ledger to store Monero, do not try to spend or move your coins until this is all sorted out.

[Pmalek]

The Ledger Incident report doesn't mention any issues with the Monero application. They are probably still investigating what exactly happened with that user before going public.
https://status.ledger.com/

[o_e_l_e_o]

They are probably still investigating what exactly happened with that user before going public.

I mean, it's already pretty public, but yeah, the devs are still investigating the issue with the user in question:

https://www.reddit.com/r/ledgerwallet/comments/awyj7m/there_is_a_bug_in_your_monero_wallet_i_may_ahve/ehseyqe/?context=3

He is in contact with me and notified me that my case is his number one priority till it's fixed.

There is another reddit thread that popped up here which seems to suggest the bug is only when using version 1.1.x of the Ledger app, with several users reporting no issues when using older versions. So it does seem to be a Ledger issue rather than a Monero issue. Advice remains the same: don't touch your Monero until this is resolved.