Connect

Security

In a significant blow to the decentralized finance (DeFi) sector, the Sushi DeFi protocol has fallen victim to its <a href="https://www.newsbtc.com/news/defi/sushi-down-45-whats-driving-the-decline/" target="_blank" rel="noopener ">second exploit</a> this year. 
The protocol’s Chief Technology Officer (CTO), Matthew Lilley, has issued a <a href="https://x.com/MatthewLilley/status/1735275960662921638?s=20" target="_blank" rel="noopener nofollow">stark warning</a> to users, advising them to refrain from using any decentralized applications (dApps) until further notice. 
<h2 id="sushi-and-zapper-frontends-compromised">Sushi And Zapper Frontends Compromised</h2> 
The latest <a href="https://www.newsbtc.com/news/defi/avalanche-based-stars-arena-falls-victim-to-a-3-million-exploit-tvl-tanks-by-100/" target="_blank" rel="noopener ">breach </a>has prompted concerns about the security and integrity of the Sushi DeFi protocol and other associated dApps. According to Lilley, a widely-used web3 connector has been compromised, allowing malicious code injection that affects numerous dApps.&nbsp; 
Specifically, dApps that use the LedgerHQ/connect-kit, a dApp that allows users to connect other dApps to their Ledger hardware wallets, are considered vulnerable. Notably, Lilley’s warning underscores the severity of the situation, emphasizing that this is not an<a href="https://www.newsbtc.com/huobi-ht/inside-job-suspected-as-huobi-wallet-falls-victim-to-263000-exploit/" target="_blank" rel="noopener "> isolated attack</a>, but a large-scale assault targeting multiple dApps. 
Further <a href="https://x.com/blockaid_/status/1735275569586090221?s=20" target="_blank" rel="noopener nofollow">investigation </a>by security experts has revealed a potential supply chain attack on the ledger connect kit. The attacker allegedly successfully injected a wallet-draining payload into the popular Node Package Manager (NPM), impacting several prominent dApps, including Hey and others.&nbsp; 
Additionally, it has been discovered that the Zapper and Sushi frontends have been hijacked, exacerbating the scope of the breach. 
Slowmist, a module of Ledger, further <a href="https://x.com/WuBlockchain/status/1735288386548879444?s=20" target="_blank" rel="noopener nofollow">confirmed </a>that their system was hijacked and tampered with during the supply chain attack. This compromised the integrity of the ledgerhq/connect-kit library, which is relied upon by many dApps.&nbsp; 
As a result, users are urged to exercise <a href="https://www.newsbtc.com/news/ftx-exploiter-executes-ongoing-funds-exodus-moves-17-million-in-eth-in-one-day/" target="_blank" rel="noopener ">caution </a>when conducting any dApp-related operations and to scrutinize requests for wallet information that may appear unexpected. 
<h2 id="malicious-connect-kit-neutralized">Malicious Connect Kit Neutralized?&nbsp;</h2> 
In an official <a href="https://x.com/Ledger/status/1735291427100455293?s=20" target="_blank" rel="noopener nofollow">statement</a>, Ledger has confirmed the identification and removal of a malicious version of the Ledger Connect Kit. The company assures users that their Ledger devices and Ledger Live remain uncompromised.&nbsp; 
The company stated that a genuine version of the Connect Kit is currently being pushed to replace the <a href="https://www.newsbtc.com/news/ethereum/ftx-exploiter-transfers-5000-eth-ahead-of-ether-futures-etf-launch/" target="_blank" rel="noopener ">malicious file</a>. Ledger advises users to refrain from interacting with any dApps at the moment for their safety.&nbsp; 
The company pledges to provide updates as the situation develops, ensuring users stay informed about the ongoing efforts to address the security breach. SUSHI’s Uptrend Threatened By Exploit Fallout 
In light of recent events affecting the Sushi DeFi protocol, its native token, SUSHI, has experienced a <a href="https://www.newsbtc.com/news/coinex-to-resume-deposits-and-withdrawals-after-exploit/" target="_blank" rel="noopener ">decline </a>of over 4% within the past hour, reaching a low of $1.590.&nbsp; 
<img loading="lazy" decoding="async" class="size-large" src="https://www.tradingview.com/x/J0eFMCLP/" alt="Sushi " width="1815" height="858"> 
Before the exploit, SUSHI had been exhibiting a notable uptrend structure on its 1-day chart, marked by higher highs and higher lows. However, with the loss of its crucial support level at $1.961, there is a potential invalidation of the previously established uptrend.&nbsp; 
The uncertainty surrounding the protocol’s native token raises the possibility of further downside in SUSHI’s price action. If a sustained downtrend continues, the next significant support level for SUSHI is located at $1.084.&nbsp; 
Featured image from Shutterstock, chart from TradingView.com&nbsp;

BREAKING: Sushi DeFi Security Breach: CTO Sounds Alarm, SUSHI Price Drops 4%

Table of Contents

NewsBTC

Other articles published on Dec 14, 2023

ICON Crypto Price Forecast: Will ICX Crypto be Bullish in 2024?

Bitcoin Exchange OKX Announced That It Listed a New Altcoin Trading Pair on Its Platform!

Biggest Crypto Gainers Today on Uniswap – HORD, KNS, ASTRADAO

CBRC-20: Transforming Token Efficiency on Bitcoin

Cardano (ADA) Marches Toward $1 After Securing Crucial Support – Here’s Why

Line Next’s $140M Funding Fuels Ambitious Global Web3 and NFT Marketplace Venture

Join our free newsletter for daily crypto updates!