Connect

SushiSwap

ZachXBT

Read

<p class="is-style-lead">SushiSwap Chief Technical Officer Mathew Lilley has disclosed the compromise of a widely employed web3 connector within Ledger’s delivery network.&nbsp;</p> 
<p>The breach has enabled malicious code injection into numerous decentralized applications (dapps).&nbsp;<a href="https://twitter.com/lookonchain/status/1735309710356877615" target="_blank" rel="noopener">Lookonchain</a> said the hacker stole $484,000 in assets, including 4.334 Ether, and the Angel Drainer phishing scam continues to receive assets, currently holding $363,000 worth.</p> 
<p>In an update, Tether has <a href="https://twitter.com/paoloardoino/status/1735315976827101274" target="_blank" rel="noopener">frozen</a> the Ledger exploiter’s address, effectively ending the scam.</p> 
<h2 class="wp-block-heading" id="removal-of-malicious-provider">Removal of malicious provider&nbsp;</h2> 
<p>Lilley contended that Ledger’s content delivery network was compromised, leading to the loading of JavaScript from the compromised network.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">🚨🚨🚨 RED ALERT 🚨🚨🚨: <br><br>Do not interact with ANY dApps until further notice. It appears that a commonly used web3 connector has been compromised which allows for injection of malicious code affecting numerous dApps.</p>— I'm Software 🦇🔊 (@MatthewLilley) <a href="https://twitter.com/MatthewLilley/status/1735275960662921638?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 14, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>The compromised Ledger connector library, widely employed by various dapps and overseen by Ledger, has seen the addition of a wallet drainer. While assets may not be drained automatically from a user’s account, prompts from browser wallets like MetaMask could potentially provide malicious actors access to the assets, according to Lilley’s claims.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/Ledger/status/1735291427100455293?s=20 
 </div>
</figure> 
<p> You might also like: <a href="https://crypto.news/red-alarm-flags-hundreds-of-risky-dapps-on-bnb-chain/"> Red Alarm flags hundreds of risky dapps on BNB Chain </a> </p> 
<p>The renowned cryptocurrency hardware wallet provider has since taken to X to announce the identification and removal of a malicious version of the Ledger Connect Kit. The company urges users to exercise caution and temporarily abstain from engaging with dapps.</p> 
<p>Assuring the community of their proactive stance, Ledger has already initiated the deployment of a genuine replacement for the compromised file. Ledger also emphasizes that the security of user Ledger devices and Ledger Live remains intact, with no compromise detected.</p> 
<h2 class="wp-block-heading" id="an-ongoing-target">An ongoing target</h2> 
<p>This is not the first time Ledger has been a target of malicious acts. On <a href="https://crypto.news/ledger-wallet-holders-lose-800k-to-fake-app/">Nov. 5</a>, crypto investigator ZachXBT raised an alert on the X platform regarding a fraudulent application named Ledger Live Web3.&nbsp;</p> 
<p>This deceptive application mimicked the legitimate Ledger Live app, an official user interface for storing crypto assets offline using hardware wallets, effectively causing users to lose $800,000.</p> 
<p> Read more: <a href="https://crypto.news/staying-safe-in-web3-your-guide-to-dapps-security/"> Staying safe in web3: your guide to dapps security </a> </p>

Ledger library flaw affects SushiSwap, Revoke.cash dapps

Table of Contents

crypto.news

Other articles published on Dec 14, 2023

Gold Price Back on Track for New Highs in 2024 After Fed Meeting

Bitwise 2024 Crypto Predictions: Bitcoin, ETFs, AI, and More

3 MICRO & LOW CAP Altcoin Gems | HIGHEST 2025 RETURNS

Why Is Shiba Inu (SHIB) Price Up 7% Today?

Bitcoin, Solana, and Cardano Soar Amidst Turbulent Crypto Year

Cardano (ADA) Price Jumps 18% As Whales Join the Party

Join our free newsletter for daily crypto updates!