Tether Freezes $484K Stolen in Ledger Supply Chain Attack

Supply chain attack targeted leading cryptocurrency wallet provider Ledger, resulting in the loss of crypto assets. This breach impacted various decentralized protocols and users. Hackers embedded harmful code in the Github library of Connect Kit, stealing nearly $484,000. This attack affected the interfaces of decentralized applications utilizing Ledger’s connector.

Ensuing the attack, Ledger finally responded and swapped the compromised file version soon after. The hacker, however, had already siphoned off over $484K in cryptocurrency. The recent security breach also impacted MetaMask users, prompting the wallet provider to introduce a corrective update for its platform.

Briefly updating its own code, Ledger still left many websites vulnerable and users at risk. Blockaid’s CEO, Ido Ben-Natan, emphasized the continuing risks for these users. He specifically warned against using revoke.cash, advising everyone to avoid engaging with it, as it remains susceptible.

Previous months have seen a wave of DeFi-related hacks, including a $300 million theft in July alone. Most recently, the impact has been primarily felt on the front-end of websites, expanding the potential range of the hack to encompass all assets within a user’s wallet.