Version

Connect

Impact

Ledger has replaced its malicious ConnectKit with a new version as a way of managing the impact of the malicious hack it suffered earlier today.&nbsp; 
<h2 id="strong-ledger-requests-move-to-version-1-1-8-strong">Ledger Requests Move to Version 1.1.8</h2> 
The protocol took to the X app to inform the public that the latest Connect Kit genuine version 1.1.8 has been rolled out. Users are advised to update their app and wait for 24 hours before trying to use the software again. Also, Ledger has assured users of an ongoing investigation to understand the extent of the attack and the level of impact on the protocol. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 FINAL TIMELINE AND UPDATE TO CUSTOMERS: 
 4:49pm CET: 
 Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again. 
 The investigation continues, here is the timeline of what we know about… 
 — Ledger (@Ledger) <a href="https://twitter.com/Ledger/status/1735326240658100414?ref_src=twsrc%5Etfw">December 14, 2023</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Ledger offered a timeline detailing how the attack went down as well as how it was discovered. The Ledger ConnectKit was attacked in a rug-pull security breach which resulted in an initial loss of about $150,000. A former Ledger employee fell victim to a phishing attack that granted the bad actor access to their NPMJS account. Next, a malicious version of the Ledger Connect Kit ranging from versions 1.1.5, 1.1.6, and 1.1.7 was published. 
Immediately, the security team was contacted to salvage the situation, and “a fix was deployed within 40 minutes of Ledger becoming aware.” The attack was disabled in alliance with WalletConnect, a communication protocol for Web3.0. Tether has also helped in <a href="https://coingape.com/tether-freezes-attackers-wallet-in-ledger-library-exploit/" target="_blank" rel="noopener">the freezing of the hacker’s wallet</a>&nbsp;and reinforcing blockchain security 
<h2 id="strong-proactive-moves-from-impacted-ledger-clients-strong">Proactive Moves from Impacted Ledger Clients</h2> 
The <a href="https://coingape.com/rug-pull-alert-multiple-protocols-affected-in-ledger-connectkit-attack/" target="_blank" rel="noopener">vulnerability</a>, now labeled by the protocol as a “supply chain attack,” was perceived to likely pose a serious threat to users and their assets since it involves the injection of malicious code into different Decentralized Applications (DApps).&nbsp; 
The vulnerability in the attack was later identified to have an impact on other protocols besides Ledger. Some impacted Decentralized Finance (DeFi) protocols were SushiSwap, Kyber, RevokeCash, and Zapper. Kyber, which was recently <a href="https://coingape.com/kyberswap-faces-46-million-crypto-hack-triggering-concerns-in-defi-space/" target="_blank" rel="noopener">hacked</a> to the tune of $46 million, and RevokeCash acted swiftly by deactivating their respective front ends. 
Specifically, the exploit was discovered to affect LedgerHQ’s ConnectKit versions greater than 1.1.4, per findings from Blockaid. Many related crypto projects have boldly declared that they were not affected by the breach but it is worth noting that such attacks have dire consequences for the broader crypto ecosystem. 
The post <a href="https://coingape.com/ledger-releases-new-connect-kit-version-to-mitigate-hack-impact/">Ledger Releases New Connect Kit Version to Mitigate Hack Impact</a> appeared first on <a href="https://coingape.com">CoinGape</a>.

Ledger Releases New Connect Kit Version to Mitigate Hack Impact

Table of Contents

Coingape News Media

Other articles published on Dec 14, 2023

Bitcoin (BTC) Price Analysis: 42230 A Major Technical Level – 15 December 2023

Dogecoin Holds Key Levels: A Rise Beyond These Levels Could Trigger DOGE Price Rally

Organizations Prefer a Synergistic Approach with AI and Human Analysts to Safeguard Their Supply ...

Solana-based project, Marinade, rallies 150% in 24 hours as this memecoin presale soars

Ireland’s deputy PM wins legal action against Google over fake crypto ads

BRC-201: Revolutionizing Scalability for BRC-20 Tokens

Join our free newsletter for daily crypto updates!