Bitcoin
Bitcoin (BTC)
$67,237.00 0.99669
Bitcoin price
Ethereum
Ethereum (ETH)
$3,515.86 0.71028
Ethereum price
BNB
BNB (BNB)
$596.89 1.3376
BNB price
Solana
Solana (SOL)
$174.22 2.55534
Solana price
XRP
XRP (XRP)
$0.5926970 2.22418
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000180 1.86553
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000123 0.8961
Pepe price
Bonk
Bonk (BONK)
$0.0000308 -2.44288
Bonk price
Bitcoin
Bitcoin (BTC)
$67,237.00 0.99669
Bitcoin price
Ethereum
Ethereum (ETH)
$3,515.86 0.71028
Ethereum price
BNB
BNB (BNB)
$596.89 1.3376
BNB price
Solana
Solana (SOL)
$174.22 2.55534
Solana price
XRP
XRP (XRP)
$0.5926970 2.22418
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000180 1.86553
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000123 0.8961
Pepe price
Bonk
Bonk (BONK)
$0.0000308 -2.44288
Bonk price
Bitcoin
Bitcoin (BTC)
$67,237.00 0.99669
Bitcoin price
Ethereum
Ethereum (ETH)
$3,515.86 0.71028
Ethereum price
BNB
BNB (BNB)
$596.89 1.3376
BNB price
Solana
Solana (SOL)
$174.22 2.55534
Solana price
XRP
XRP (XRP)
$0.5926970 2.22418
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000180 1.86553
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000123 0.8961
Pepe price
Bonk
Bonk (BONK)
$0.0000308 -2.44288
Bonk price
Bitcoin
Bitcoin (BTC)
$67,237.00 0.99669
Bitcoin price
Ethereum
Ethereum (ETH)
$3,515.86 0.71028
Ethereum price
BNB
BNB (BNB)
$596.89 1.3376
BNB price
Solana
Solana (SOL)
$174.22 2.55534
Solana price
XRP
XRP (XRP)
$0.5926970 2.22418
XRP price
Shiba Inu
Shiba Inu (SHIB)
$0.0000180 1.86553
Shiba Inu price
Pepe
Pepe (PEPE)
$0.0000123 0.8961
Pepe price
Bonk
Bonk (BONK)
$0.0000308 -2.44288
Bonk price

Ledger library flaw affects SushiSwap, Revoke.cash dapps

ledger-library-flaw-affects-sushiswap-revoke-cash-dapps
Edited by
News
Ledger library flaw affects SushiSwap, Revoke.cash dapps

SushiSwap Chief Technical Officer Mathew Lilley has disclosed the compromise of a widely employed web3 connector within Ledger’s delivery network. 

The breach has enabled malicious code injection into numerous decentralized applications (dapps). Lookonchain said the hacker stole $484,000 in assets, including 4.334 Ether, and the Angel Drainer phishing scam continues to receive assets, currently holding $363,000 worth.

In an update, Tether has frozen the Ledger exploiter’s address, effectively ending the scam.

Removal of malicious provider 

Lilley contended that Ledger’s content delivery network was compromised, leading to the loading of JavaScript from the compromised network.

The compromised Ledger connector library, widely employed by various dapps and overseen by Ledger, has seen the addition of a wallet drainer. While assets may not be drained automatically from a user’s account, prompts from browser wallets like MetaMask could potentially provide malicious actors access to the assets, according to Lilley’s claims.

https://twitter.com/Ledger/status/1735291427100455293?s=20

The renowned cryptocurrency hardware wallet provider has since taken to X to announce the identification and removal of a malicious version of the Ledger Connect Kit. The company urges users to exercise caution and temporarily abstain from engaging with dapps.

Assuring the community of their proactive stance, Ledger has already initiated the deployment of a genuine replacement for the compromised file. Ledger also emphasizes that the security of user Ledger devices and Ledger Live remains intact, with no compromise detected.

An ongoing target

This is not the first time Ledger has been a target of malicious acts. On Nov. 5, crypto investigator ZachXBT raised an alert on the X platform regarding a fraudulent application named Ledger Live Web3. 

This deceptive application mimicked the legitimate Ledger Live app, an official user interface for storing crypto assets offline using hardware wallets, effectively causing users to lose $800,000.