Ledger Connect Kit Malicious Code Injection Attack: $600.00K Reported Loss
the Ledger Connect Kit suffered a supply chain attack, with attackers stealing at least $600,000.
- Reported loss
- $ 600,000
- Attack category
- Malicious Code Injection Attack
Incident Overview
The SlowMist security team immediately initiated an analysis of the relevant code and discovered that the attackers implanted malicious JavaScript code in versions @ledgerhq/connect-kit=1.1.5/1.1.6/1.1.7. They directly replaced the normal window logic with a Drainer class, triggering not only a fake DrainerPopup popup but also handling the transfer logic for various assets. Attackers launched phishing attacks against cryptocurrency users through CDN.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.