At Least $484K Embezzled by the Perpetrator of the Ledger Attack

The Impact of the Ledger Hack

The hacker responsible for the attack on Ledger’s connector library has reportedly stolen assets worth nearly $484,000, according to blockchain analysis platform Lookonchain. Although Ledger has not confirmed these figures, the company acknowledges that the security breach could result in significant financial damage.

Compromised Web3 Connector

On December 14, users on Twitter flagged an incident involving a compromised Web3 connector. This allowed malicious code to be injected into multiple decentralized applications (DApps). The affected protocols include Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash. However, some users believe that similar programs to LedgerHQ/connect-kit may also be vulnerable.

MetaMask Affected

MetaMask, a popular wallet provider, confirmed that its users were also impacted by the hack. The company deployed a fix for its platform and advised users on the latest version to transact again. Users not on this version were instructed to refresh their site data.

Immediate Action Required

After nearly three hours, Ledger announced that the malicious file had been replaced with a genuine version. The company urges its users to always clear sign transactions and emphasizes that any discrepancy between the screen shown on their device and their computer/phone screen should be a cause for immediate concern.

Disabling of Protocols

Following the incident, several protocols have disabled the library. Additionally, Tether, a stablecoin issuer, froze the exploiter address associated with the hack.

Hot Take: Protecting Your Crypto Assets

The recent hack on Ledger’s connector library highlights the ongoing risks faced by crypto users. It is crucial to remain vigilant and take necessary precautions to protect your digital assets. Always ensure that you are using the latest version of wallets and DApps, and be cautious of any discrepancies or suspicious activity. By staying informed and practicing secure practices, you can minimize the potential impact of such security breaches.