Ledger Suffers Supply Chain Attack!

Author: Mustafa Mulla

Mustafa has been writing about Blockchain and crypto since many years. He has previous trading experience and has been working in the Fintech industry since 2017.

Dec 14, 2023 19:00

Ledger has suffered a supply chain attack. The library called connect-kit, which allows developers to connect their decentralized applications (DApps) to Ledger hardware wallets, has been compromised. The attacker injected a wallet-draining payload into the popular NPM package, potentially affecting numerous DApps, including Hey and many others. The Sushi CTO has warned against using any DApps that utilize LedgerHQ/connect-kit until further notice. This incident underscores the importance of supply chain security in the blockchain industry and highlights the need for increased vigilance and caution when using DApps.