Cardano

Connect

Read

Rewards

Tether has effectively immobilized significant funds linked to a recent cyberattack on Ledger’s code library. This decisive move underscores the ongoing battle against cybercriminals in the blockchain space. Tether’s Chief Technology Officer, Paolo Ardoino, announced the freezing of an<a href="https://coingape.com/rug-pull-alert-multiple-protocols-affected-in-ledger-connectkit-attack/?utm_source=cgtelegram"> attacker’s address</a> that siphoned approximately $483,000 from various protocols, as per data from DeBank. 
<h2 id="details-of-the-compromised-assets">Details of the Compromised Assets</h2> 
Among the stolen assets were $44,000 in USDT, Tether’s stablecoin. Tether has barred any further USDT transactions from this address by freezing the wallet, though other digital asset transactions remain possible. Notably, the attacker’s wallet interacted with the notorious AngelDrainer phishing group, including a transaction involving 4.334 ETH. 
<h2 id="ledger-s-vulnerability-and-response">Ledger’s Vulnerability and Response</h2> 
Ledger, a leading hardware wallet provider, suffered a significant setback when its Ledger ConnectKit library, a critical code repository, was compromised. The breach, which originated from a phishing attack on a former Ledger employee, resulted in the injection of malicious code.&nbsp; 
Consequently, the front-ends of several decentralized finance (DeFi) protocols were left exposed to potential exploits. In response, DeFi platforms such as Kyber and RevokeCash temporarily disabled their front-ends, while Sushi Swap’s CTO Matthew Lilley advised users to avoid all dapp interactions. 
<h2 id="prompt-mitigation-and-collaboration">Prompt Mitigation and Collaboration</h2> 
Ledger has since <a rel="nofollow" href="https://github.com/LedgerHQ/connect-kit/releases/tag/ck-v1.1.8">released an update</a>, Ledger Connect Kit version 1.1.8, to address the security flaw. The malicious version affected versions 1.1.5 to 1.1.7, utilizing a rogue WalletConnect project to redirect funds to the hacker’s wallet. Ledger’s team deployed a fix within 40 minutes of being alerted, effectively limiting the malicious file’s active period to about 5 hours. The window for fund drainage was even narrower, lasting less than two hours. 
Ledger’s swift action, combined with the support from WalletConnect service, Tether, Chainalysis, and on-chain investigator ZachXBT, exemplifies the strength of collaboration in the crypto community. Such partnerships are crucial in tackling the sophisticated threats that increasingly target the world of digital assets. 
Read Also: <a href="https://coingape.com/cardano-users-warned-against-fake-ada-rewards-scam/?utm_source=cgtelegram">Cardano Users Warned Against Fake ADA Rewards Scam</a> 
The post <a href="https://coingape.com/tether-freezes-attackers-wallet-in-ledger-library-exploit/">Just In: Tether Freezes Attacker’s Wallet in Ledger Library Exploit</a> appeared first on <a href="https://coingape.com">CoinGape</a>.

Just In: Tether Freezes Attacker’s Wallet in Ledger Library Exploit

Table of Contents

Coingape News Media

Other articles published on Dec 14, 2023

Solana-based project, Marinade, rallies 150% in 24 hours as this memecoin presale soars

Ireland’s deputy PM wins legal action against Google over fake crypto ads

Investment Management Firm Bitwise Announces Bitcoin Price Forecast and Possible Scenarios!

Harga AVAX Meroket Lebih dari Dua Kali Lipat, Siap Lampaui Ethereum

BREAKING: Sushi DeFi Security Breach: CTO Sounds Alarm, SUSHI Price Drops 4%

JPMorgan: Bitcoin ETF’s impact overstated, Ethereum set to surprise skeptics

Join our free newsletter for daily crypto updates!