Hackers attacked DApps using Ledger Connect tool code vulnerability
The company assured that they have already eliminated the malware version of the tool
14.12.2023 - 14:16
303
3 min
0
What’s new? Hardware wallet maker Ledger said it has removed a malicious version of the Ledger Connect kit, a tool that allows developers to connect their decentralized applications to the company’s physical devices. Earlier, an anonymous blockchain analyst under the nickname banteg reported that the tool’s library had been compromised and replaced with malicious code to empty users’ wallets, prompting him to recommend against interacting with apps using Ledger Connect. He later confirmed that the company had updated the code and fixed the vulnerability.
What else is known? Due to the incident, decentralized exchanges (DEXs) SushiSwap and KyberSwap have temporarily disabled their user interfaces to avoid losing funds. At the time of writing, KyberSwap has restored the interface, assuring that it was not affected by the Ledger Connect exploit. At the same time, the exchange’s team urged users to be cautious when connecting their wallets to decentralized applications, attaching a screenshot of the malicious interface.
For its part, SushiSwap is still working on removing the Ledger Connect tool. The developers warned that the wallet connection window that pops up when visiting the exchange’s website is malicious. Experts at blockchain audit firm PeckShield said the exchange’s interface has been compromised.
The Curve Finance DeFi protocol team has also removed Ledger from the list of wallets available for connection.
Stani Kulechov, the founder of the DeFi protocol Aave, assured that his project was not affected by the exploit and that all funds are safe.
So far, the exact amount of damage is unknown.
Useful material?
Market
The company’s unrealized profits from investing in its first cryptocurrency approached $14 billion
Nov 19, 2024
Incidents
The search, the reason for which was not announced, took place a week after the election, the results of which Polymarket users predicted quite accurately
Nov 14, 2024
Market
Analysts point to the growing popularity of the first cryptocurrency as a safe haven asset
Nov 13, 2024
Market
The product will begin trading on the Swiss Exchange on November 19
Nov 12, 2024
Market
The company’s unrealized profits from investing in the first cryptocurrency approached $13 billion
Nov 12, 2024
Market
The company predicts that the rate of the first cryptocurrency will grow to $200 000 by the end of next year
Nov 11, 2024