Recently, a supply chain attack targeted leading cryptocurrency wallet provider Ledger, compromising its front-end services through the introduction of malicious code. This breach resulted in the loss of crypto assets valued in the hundreds of thousands, affecting various decentralized protocols and users so far.
Hackers Stole Nearly $484K From Ledger
Hackers stole $484,000 by embedding harmful code into the Github library of Connect Kit, a prominent blockchain software managed by crypto wallet company Ledger. This infiltration has affected numerous key decentralized finance (DeFi) protocols relying on the library. Users are being cautioned to refrain from using decentralized apps (dApps) until these systems receive updates.
The interfaces of several decentralized applications (DApps) utilizing Ledger’s connector, such as Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash, were breached. Approximately three hours following the detection of this security incident, Ledger announced that the compromised file version had been substituted with the authentic version around 1:35 pm UTC.
By the time Ledger responded, the hacker had already siphoned off over $484K in cryptocurrency, as reported by Lookonchain. The perpetrator transferred 4.334 Ethereum to Angel Drainer, which currently holds about $363K in crypto assets. Meanwhile, Tether has frozen the account’s ability to transfer $44K in USDT, leaving approximately $412K in STETH, USDC, and other digital assets.
This is a developing story
