The perpetrator of the attack on Ledger’s connector library managed to steal at least 4.334 Ether (ETH), equivalent to nearly $484,000, as reported by blockchain analysis platform Lookonchain. While Ledger has not officially verified these figures, the impact of the security breach is anticipated to be substantial, potentially reaching hundreds of thousands of dollars.
On December 14, users on the X platform raised alarm about the compromise of a popular Web3 connector, enabling the injection of malicious code into multiple decentralized applications (DApps). Affected protocols include Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash. The extent of the damage could be more extensive, with indications that the vulnerability might exist in other programs similar to LedgerHQ/connect-kit.
MetaMask users were also impacted by the hack, prompting the wallet provider to deploy a fix for its platform. Users on the latest version, v2.121.0, were assured they could transact again and would receive automatic updates. MetaMask advised users not on this version to refresh their site data.
Around three hours after the incident, Ledger reported that the malicious version of the file had been replaced with the genuine version at approximately 1:35 pm UTC. Users are cautioned to “always Clear Sign” transactions, emphasizing that addresses and information displayed on the Ledger screen are the only authentic details.
“If there’s a difference between the screen shown on your Ledger device and your computer/phone screen, stop that transaction immediately.”
After the incident, various protocols deactivated the library. Tether, the stablecoin issuer, also froze the exploiter’s address, Paolo Ardoino stated.
Image by Freepik
Disclosure Statement: Miami Crypto does not take any external funding, or support to bring crypto news to the readers. We do not have any conflicts of interest while writing news stories on Miami Crypto.