Security

Balancer

Multiple DApps using Ledger’s connector, including Zapper, SushiSwap, Balancer and Revoke.cash, were compromised on Dec. 14.
The issue is related to a software library from Ledger wallet, the “LedgerHQ” library, that dapps rely on for use with the crypto wallet service. This vulnerability could potentially allow malicious code to be injected into numerous dapps on their front-ends, posing a significant risk to users and their assets.
Front ends to multiple dapps could be vulnerable if used. Projects like Kyber and RevokeCash confirmed on X that they disabled their front-ends.
According to latest announcement from Ledger, the malicious version of the file has been replaced with the genuine version. Ledger emphasiss that users need to always clear sign transactions, the address and the information presented on Ledger screen is the only genuine information. If there is a difference between the screen shown on your Ledger device and your computer screen, stop that transaction immediatly.

Major Security Vulnerability Found in Ledger Software Library, Affecting Multiple Dapps

TokenInsight

Other articles published on Dec 14, 2023

SEC delays decision on Invesco Galaxy spot Ethereum ETF to 2024

Dogecoin Whales Quietly Buy $127 Million Worth Of DOGE Amid Market Turmoil

Spotlight on Crypto ETFs: Exceptional Gains Among Digital Asset Funds in 2023

SEC insists on cash redemption model for Bitcoin ETFs amid industry buzz

Ex-Goldman Sachs Executive Says He’s Long XRP After Pouncing on ‘Opportunity of a Lifetime’

Deutsche Bank-backed Taurus Partners With Teylor To Tokenize SME Loans In Germany

Join our free newsletter for daily crypto updates!