Loading...

Ledger security breach compromises crypto assets worth $484,000

Ledger security breach compromises Crypto assets worth $484,000

Most read

Loading Most Ready posts..

TL;DR

  • Ledger faced a security breach, leading to a $484,000 crypto theft due to malicious code in its Connect Kit.
  • The breach affected numerous DeFi protocols and services, exposing vulnerabilities in decentralized apps.
  • This incident adds to Ledger’s history of security issues, including a 2020 data breach and software concerns.

The hacker responsible for the attack on Ledger’s connector library has stolen assets worth around $484,000. This information was provided by the blockchain analysis platform Lookonchain. Although Ledger has not yet confirmed these figures, they have stated that the security breach could have a significant impact, potentially amounting to hundreds of thousands of dollars.

The hack and its immediate impact

Cryptopolitan reported earlier that the breach occurred when malicious code was inserted into Ledger’s Github library for Connect Kit, a crucial component many DeFi protocols use to interface with cryptocurrency hardware wallets. The malicious code affected the front-end of all applications utilizing the Connect Kit. Major protocols such as Sushi, Lido, Metamask, and Coinbase were among those impacted by this security lapse.

In response to the incident, Ledger acknowledged that one of its employees fell victim to a phishing attack, leading to the unauthorized publication of a compromised version of the Ledger Connect Kit. The former employee’s name and email showed up in the compromised code. It is important to know that the crypto community initially thought the developer was responsible for the exploit. However, Ledger later declared that the attack resulted from an ex-employee falling victim to a phishing attack. 

The company acted promptly, identifying and removing the harmful version of the software. However, despite Ledger’s quick response, the damage had already been done in approximately two hours, during which the hackers drained funds.

Broader implications for the DeFi community

This incident raises significant concerns about the security infrastructure of decentralized applications. DeFi protocols often rely on code from various software providers, including Ledger, making them vulnerable to multiple potential points of failure. This vulnerability was starkly highlighted in this incident, emphasizing the need for heightened security measures across the DeFi ecosystem.

The hack affected direct users of Ledger’s services and extended to users of services like revoke.cash. This service, typically used to remove permissions from DeFi protocols after security breaches, was also compromised. Users attempting to secure their assets were inadvertently led to a malicious token drainer, thereby broadening the scope of the theft.

MetaMask, a popular wallet provider, was also affected by the breach. The company deployed a fix for its platform two hours after the attack, ensuring that users on the latest version were safe from the exploit.

Ledger’s continued challenge with security

This is not the first time Ledger has faced security issues. In 2020, the company suffered a significant data breach when its customer database was leaked, raising concerns about sim swapping and home invasion threats. Furthermore, Ledger faced controversy over discrepancies between its hardware’s marketed and actual security in a software update this past year.

The recent hacking incident underscores the fragile nature of decentralized applications and the critical importance of robust security protocols. While Ledger has taken steps to mitigate the impact of this breach, the DeFi community remains alert to the ongoing challenges of ensuring the security of its assets in an increasingly complex digital financial industry. 

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

Share link:

Damilola Lawrence

Damilola is a crypto enthusiast, content writer, and journalist. When he is not writing, he spends most of his time reading and keeping tabs on exciting projects in the blockchain space. He also studies the ramifications of Web3 and blockchain development to have a stake in the future economy.

Stay on top of crypto news, get daily updates in your inbox

Related News

Cryptopolitan
Subscribe to CryptoPolitan