A patched Ethereum app flaw has put Ledger and OneKey at odds over whether a lab reproduction counts as a real hack.