Pascal

Secret

<p class="is-style-lead">Hardware crypto wallet maker Ledger plans to make defi participants whole by covering approximately $600,000 in digital assets stolen during a Dec. 14 incident.</p> 
<p>The company acknowledged many crypto users were affected by a connector kit exploit targeted at the front end of EVM dapps. These decentralized platforms included exchanges and web3 tools like Revoke.cash, although the number of affected users was either unknown or undisclosed.</p> 
<p>Ledger said it would reimburse all exploit victims by February, including non-customers. The wallet provider also highlighted an action plan to deactivate blind signing, which supposedly aided the attacker’s efforts and facilitated crypto theft.&nbsp;</p> 
<blockquote class="wp-block-quote"> 
 <p>We are announcing that by June 2024, users will no longer be able to Blind Sign with Ledger devices. Our commitment is to work with the community and DApp ecosystem to allow Clear Signing so users can verify all transactions on Ledger devices before signing.</p> <cite>Ledger on <a href="https://twitter.com/Ledger/status/1737459233954697684" target="_blank" rel="noopener">X</a></cite>
</blockquote> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">⚠️Please always be aware of on-going phishing and scams.<br><br>We only have two genuine social media accounts, <a href="https://twitter.com/Ledger?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@ledger</a> and <a href="https://twitter.com/Ledger_Support?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@ledger_support</a>.<br><br>The rest are all fake accounts.<br><br>ANYONE asking for your 24-word Secret Recovery Phrase IS a criminal.<br><br>(End of post)</p>— Ledger (@Ledger) <a href="https://twitter.com/Ledger/status/1737459233954697684?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 20, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p> You might also like: <a href="https://crypto.news/ledger-ex-staff-phished-in-library-compromise/"> Ledger ex-staff phished in library compromise </a> </p> 
<p>According to Ledger CEO Pascal Gauthier, on Dec. 14, a phishing scammer connected to the Angel Drainer hacker <a href="https://crypto.news/ledger-library-flaw-affects-sushiswap-revoke-cash-dapps/">leveraged</a> compromised Github access to publish malicious code. This code was broadcast to a widely used web3 library employed by dapps like SushiSwap.&nbsp;</p> 
<p>The general sentiment from crypto participants on social media suggested that the impact was minimal, although losses could have been devastating since the WalletConnect build was used in a web of defi platforms.&nbsp;</p> 
<p>Following the incident and on-chain investigations traced back to Angel Drainer, stablecoin operator Tether froze the hacker’s address amid ERC-20 transactions seemingly meant to launder stolen funds.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Tether just froze the Ledger exploiter address</p>— Paolo Ardoino 🍐 (@paoloardoino) <a href="https://twitter.com/paoloardoino/status/1735315976827101274?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 14, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Gauthier’s wallet creator has been embroiled in controversy during the year. Customers also lost thousands in Bitcoin (<a href="https://crypto.news/price/bitcoin/">BTC</a>) and Ether (<a href="https://crypto.news/price/ethereum/">ETH</a>) due to a <a href="https://crypto.news/ledger-wallet-holders-lose-800k-to-fake-app/">fake version</a> of its service on Microsoft’s App Store.&nbsp;</p> 
<p>The wallet manufacturer received backlash for its recovery service, which offered a means to regain access even if a user lost their secret seed phrase.</p> 
<p> Read more: <a href="https://crypto.news/ledger-to-launch-controversial-recovery-service/"> Ledger to launch controversial recovery service </a> </p>

Ledger to reimburse library exploit victims by February

crypto.news

Other articles published on Dec 20, 2023

Anthropic’s Copyright Shield – Safeguarding Enterprise AI Customers in 2024

Mantle (MNT) vs Ripple (XRP) – Why Do Holders Prefer Meme Moguls (MGLS)?

Ripple Price Prediction: XRP Price Set to Hit $22, Analyst Sees 3,510% Growth by Next Bull Market

Bitcoin completes ‘perfect retest’ of this key level

XRP Whale Shifts 22 Mln XRP As Price Flirts Near $0.61 Mark, What’s Next?

Analysts Believe Dogecoin and This New Meme Coin Are Next To Surge

Join our free newsletter for daily crypto updates!