A recent large-scale cyber attack has targeted hardware wallet company Ledger. The vulnerability was traced back to its GitHub page. The attack affected several DeFi apps that use Ledger's widely used Web3 connector.
The hackers tampered with the design of websites and apps. This attack allowed them to divert customer payments. This form of attack does not compromise the core wallet of a protocol. However, it leads users to forward tokens to the attacker's account.
SushiSwap's CTO, Matthew Lilley, was among the first to issue a warning. He asked users to stop interacting with decentralized apps because the attack had affected many. "Do not interact with ANY dApps until further notice," Lilley cautioned. He also urged Ledger to do a thorough investigation into the problem.
Blockaid, a Web3 security firm, hinted about a possible supply chain attack targeting Ledger's Connect Kit, depleting user wallets across several platforms. Revoke.cash, another DeFi platform compromised, confirmed they were also targeted. The extent of the hacking is still unknown.
This is a developing story.
