Ledger Exploit Drained $484K, Upended DeFi; Former Staffer Linked to Malicious Code
Summary
Hackers stole $484,000 by inserting malicious code into the Github library for Ledger's Connect Kit, impacting DeFi protocols that use the kit. Users have been warned to avoid decentralized apps until protocols are updated. Ledger removed the malicious version and said the window for fund drainage was less than two hours. However, many websites and users are still affected. MetaMask deployed a fix to remove the code. This incident highlights the vulnerability of decentralized applications and the risks involved in using code from various software providers.
