BTC

$69498.055

2.95%

ETH

$2429.959

0.28%

BNB

$563.932

2.44%

XRP

$0.514

1.70%

News

Ledger Security Breach Affects $600,000 Of Users

December 20, 2023 - Around 2 mins mins to read
Key Points:
  • Ledger security breach last week led to a $600,000 asset theft from users employing blind signing on Ethereum dApps.
  • Ledger vows to aid affected users, regardless of device use, in recovering funds by February 2024.
  • Clear Signing implementation is planned, and blind signing with Ledger devices will cease by June 2024.
In a recent large-scale security incident, crypto hardware wallet manufacturer Ledger revealed that approximately $600,000 worth of assets were compromised last week.

Ledger Security Breach Affects $600,000 Of Users

Ledger Security Breach Shakes Saw $600,000 in Assets Stolen

The Ledger security breach targeted users employing blind signing on Ethereum Virtual Machine (EVM) decentralized applications (dApps). Ledger has committed to assisting affected individuals, irrespective of their use of Ledger devices, in recovering their funds by the end of February 2024.

Ledger, based in Paris, has taken immediate steps to rectify the situation. The company aims to collaborate with the dApp ecosystem to implement Clear Signing, and enhance security measures. Notably, Ledger has decided to discontinue the use of its devices for Blind Signing before June 2024.

The Ledger security breach affected various Ethereum-based applications, including Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash. Ledger identified and fixed the malicious code by 13:35 UTC, urging users to engage in Clear Signing transactions to ensure direct interaction with the company’s website and software.

Recovery Plans and Increased Vigilance

Despite the brevity of the debacle, caution remains advised. Cybersecurity experts emphasize prudence when interacting with applications in the aftermath of an incident. Reflecting a responsible stance within the crypto industry, stablecoin issuer Tether took proactive measures by freezing a portion of the stolen funds.

The hackers executed the Ledger security breach by initiating a phishing email to a former Ledger employee. Subsequently, they gained access to one of the software development accounts, enabling them to distribute the malicious code.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Blind Signing

Clear Signing

dApp

Ethereum virtual machine

hack

Ledger

Avatar of Harold

Author

Harold

With a passion for untangling the complexities of the financial world, I've spent over four years in financial journalism, covering everything from traditional equities to the cutting edge of venture capital. "The financial markets are a fascinating puzzle," I often say, "and I love helping people make sense of them." That's what drives me to bring clear and insightful financial journalism to the readers of Coincu.
News

Ledger Security Breach Affects $600,000 Of Users

Key Points:
  • Ledger security breach last week led to a $600,000 asset theft from users employing blind signing on Ethereum dApps.
  • Ledger vows to aid affected users, regardless of device use, in recovering funds by February 2024.
  • Clear Signing implementation is planned, and blind signing with Ledger devices will cease by June 2024.
In a recent large-scale security incident, crypto hardware wallet manufacturer Ledger revealed that approximately $600,000 worth of assets were compromised last week.

Ledger Security Breach Affects $600,000 Of Users

Ledger Security Breach Shakes Saw $600,000 in Assets Stolen

The Ledger security breach targeted users employing blind signing on Ethereum Virtual Machine (EVM) decentralized applications (dApps). Ledger has committed to assisting affected individuals, irrespective of their use of Ledger devices, in recovering their funds by the end of February 2024.

Ledger, based in Paris, has taken immediate steps to rectify the situation. The company aims to collaborate with the dApp ecosystem to implement Clear Signing, and enhance security measures. Notably, Ledger has decided to discontinue the use of its devices for Blind Signing before June 2024.

The Ledger security breach affected various Ethereum-based applications, including Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash. Ledger identified and fixed the malicious code by 13:35 UTC, urging users to engage in Clear Signing transactions to ensure direct interaction with the company’s website and software.

Recovery Plans and Increased Vigilance

Despite the brevity of the debacle, caution remains advised. Cybersecurity experts emphasize prudence when interacting with applications in the aftermath of an incident. Reflecting a responsible stance within the crypto industry, stablecoin issuer Tether took proactive measures by freezing a portion of the stolen funds.

The hackers executed the Ledger security breach by initiating a phishing email to a former Ledger employee. Subsequently, they gained access to one of the software development accounts, enabling them to distribute the malicious code.

DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.