Latest Ledger firmware update (Nano X 2.5.0, Nano S Plus 1.4.0, Stax 1.8.0, Flex 1.4.0) breaks connecting via WebUSB on Windows

[lukaw3d]

Ledger issues reported via Discord:

• Ledger Nano X. Updated Ledger's firmware software 5th August (that means probably firmware 2.5.0; Oasis ledger app 2.7.0)
  Using Windows, Brave, Chrome and Edge
  Select accounts to open: No account selected
  USB Transport error: Failed to execute 'open' on 'USBDevice': An operation that changes interface state is in progress.. No Ledger device selected. Make sure it is connected, check common USB connection issues with Ledger, and check site permissions don't block USB devices.

  Have you tried other USB port or other device?: tried on another computer and same error. same ledger and same USB port working with other wallets like backpack, rabby...

  failed to execute 'reset' on 'USBDevice': unable to reset the device

  solved on android + bluetooth

• "The same thing happened to me, the PC does not recognize the Ledger Nano X, but it did recognize the Ledger Nano S."

• "Tried this but still same issue with loading accounts "connecting with ledger" on Rose wallet screen.
  the recent ledger live update to 2.122.1 or the firmware update to version 1.4.0 on the nano s+ has caused this issue as up until that point my Oasis consensus wallet access worked perfectly via chrome

[lukaw3d]

first suspect is new nano x firmware: https://support.ledger.com/article/360014980580-zd

Ledger Nano X - OS Version 2.5.0 (latest version)
Released: 31 July 2025

also nano s+ version 1.4.0 https://support.ledger.com/article/4494540771997-zd

but only affects Windows using webusb?

Ledger team is not aware? https://support.ledger.com/article/15158192560157-zd

[lukaw3d]

Workarounds for community, ranked by difficulty:

• Ledger released a fixed firmware: Nano X 2.5.1, Nano S Plus 1.4.1, Stax 1.8.1, Flex 1.4.1
• Don't update firmware
• Use experimental WebHID version: https://pr-2200.oasis-wallet.pages.dev/
• Use Chrome on Android: https://wallet.oasis.io/ and connect using USB C
• Use Oasis CLI on any platform (Linux, Windows & macOS)
• Use Chrome on macOS: https://wallet.oasis.io/
• Use Chrome on Linux: https://wallet.oasis.io/
• Use Experimental Android app with Bluetooth support: https://github.com/oasisprotocol/wallet/releases/download/v2.3.0/rose-wallet-android-2.3.0.apk

Risky

• Lose hardware protections https://lukaw3d.github.io/oasis-unledger/

[lukaw3d]

Ledger support says their engineering team is aware and already looking into it
(still not on https://support.ledger.com/article/15158192560157-zd 🤷 )

[lukaw3d]

Ledger team is aware

https://support.ledger.com/article/15158192560157-zd
https://support.ledger.com/article/Windows-Cannot-connect-via-WebUSB

[lukaw3d]

I was planning to do

export function* getUSBTransport() {
  if (yield* call(TransportWebHID.isSupported)) {
    try {
      return yield* call([TransportWebHID, TransportWebHID.create])
    } catch (e: any) {
      // Ignore error and fallback to WebUSB
    }
  }
  if (yield* call(TransportWebUSB.isSupported)) {
    try {
      return yield* call([TransportWebUSB, TransportWebUSB.create])
    } catch (e: any) {
      if (e.message.match(/No device selected/)) {
        throw new WalletError(WalletErrors.LedgerNoDeviceSelected, e.message)
      } else {
        throw new WalletError(WalletErrors.USBTransportError, e.message)
      }
    }
  }
  throw new WalletError(
    WalletErrors.USBTransportNotSupported,
    'TransportWebHID and TransportWebUSB unsupported',
  )
}

because

• WebHID but fixes Ledger issue on Windows
• but it has less browser support, so fallback to WebUSB
  https://caniuse.com/webhid
  https://caniuse.com/webusb
• also fallback so that extension users that have granted WebUSB permission can still use it

but this doesn't work

• those experiencing Ledger issue on Windows on extension would still fallback to WebUSB if they already granted permission, and get stuck when they try to sign a tx
• WebHID doesn't work in extension popup after you grant permission in persistent popup. It only ever works in persistent popup

it would only work on web wallet 😢

[lukaw3d]

Rabby wallet uses WebHID, should check what they do about using it in popup

Looks like it works through offscreen document https://github.com/search?q=repo%3ARabbyHub%2FRabby%20offscreen&type=code

[tjanez]

@lubej, can you test with Chrome on macOS and update:
#2198 (comment)

[lukaw3d]

We could use #2202, but limited to only web wallet

And extension could detect windows+firmware version (oh wait can we even get firmware version without stalling?) and direct users to web wallet. Probably can't. Detect using timeout instead: #2205