The hack targeting Ledger’s connector library led to the theft of assets valued at approximately $484,000. Blockchain analysis experts from Lookonchain were the first to report the extent of the theft.
The repercussions of the breach were immediately felt across several prominent decentralized applications (DApps), including Zapper, SushiSwap, and Phantom.
Users on Twitter were quick to notice and report the compromise, which allowed the injection of malicious code.
In response, MetaMask deployed a fix to mitigate the risk to its users. Their proactive stance ensured that users with the latest software version remained secure.
Approximately three hours post-incident, Ledger announced the removal of the malicious file, replacing it with a secure version.
Several protocols have since disabled the compromised library. Additionally, Tether took decisive action by freezing the exploiter’s address.
This move by Tether’s CTO, Paolo Ardoino, demonstrates the crypto industry’s commitment to user security and fraud prevention.
This incident is a reminder of the ongoing challenges in securing digital assets. It stresses the need for constant vigilance and proactive measures to safeguard against such vulnerabilities in the crypto landscape.
Also Read: Ledger Fixes Library Issue, Advises Caution with DApp Links