SushiSwap

Coin

<ul class="news-points"> 
 <li>Ledger ConnectKit exposes popular dApps to wallet-draining attacks.</li> 
 <li>Popular dApps, including SushiSwap and Zapper, were confirmed to be affected.</li> 
 <li>Ledger has released a minor update to eliminate the malicious code.</li> 
</ul> 
Users of the renowned crypto self-custody solution Ledger have become the latest targets for a well-planned attack targeting their crypto funds. Specifically, an attacker has compromised Ledger ConnectKit, a popular software library that <a href="https://coinedition.com/what-is-decentralized-application-dapps-everything-you-need-to-know/">decentralized applications (dApps)</a> use to connect with Ledger hardware wallets. 
This vulnerability was disclosed by blockchain security tracking firm Blockaid in a recent tweet. Blockaid characterized it as a supply chain attack as the hacker poisoned the library’s source, affecting applications relying on it. 
Specifically, the attacker injected malicious wallet-draining payload code into the library to drain crypto assets stored in Ledger devices connected to dApps using the compromised ConnectKit. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> We've detected a potential supply chain attack on ledgerconnect kit <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> The attacker injected a wallet draining payload into the popular NPM package. This currently affects a couple of popular dapps including but not …
 </blockquote>
 </div>
</figure>
The post <a href="https://coinedition.com/ledger-pushes-update-as-wallet-users-targeted-in-sophisticated-attack/">Ledger Pushes Update as Wallet Users Targeted in Sophisticated Attack</a> appeared first on <a href="https://coinedition.com">Coin Edition</a>.

Ledger Pushes Update as Wallet Users Targeted in Sophisticated Attack

Coin Edition

Other articles published on Dec 15, 2023

3 Reasons Why XRP Is Underperforming in This Rally

XRP Bulls Anticipate $2 Rally as Renowned Analyst Makes Bullish Prediction

Bitcoin Price Prediction as Gary Gensler Says SEC Taking ‘New Look’ at Spot BTC ETFs – Approval C...

Bitcoin Vulnerabilities Trigger Cybersecurity Alarm in U.S. National Vulnerability Database

ChatGPT Predicts Bright Future For These Altcoins

Exploring which token will reach $10 First: Polygon, Cardano, or Retik Finance

Join our free newsletter for daily crypto updates!