In a recent and alarming development, the Decentralized Finance (DeFi) space faced a rug-pull security breach with a supply chain attack on the Ledger ConnectKit.
The Ledger ConnectKit Attack Unveiled
The vulnerability, now labeled a “supply chain attack,” poses a serious risk to users and their assets, potentially allowing malicious code injection into various Decentralized Applications (dApps). The compromised package identified in the attack is LedgerHQ’s ConnectKit, specifically versions greater than 1.1.4, according to Web3 security firm, Blockaid.
We’ve detected a potential supply chain attack on ledgerconnect kit The attacker injected a wallet draining payload into the popular NPM package.This currently affects a couple of popular dapps including but not limited to https://t.co/2QJmKIGv9T
— Blockaid (@blockaid_) December 14, 2023
The impact of the supply chain attack on Ledger ConnectKit was felt across various DeFi protocols. Blockaid mentioned that SushiSwap, Kyber,
We współpracy z: https://coingape.com/rug-pull-alert-multiple-protocols-affected-in-ledger-connectkit-attack/
