Tether Freezes Assets of Ledger Exploiter, Including 44k USDT and Additional Assets Totaling 412k USD

The perpetrator of the attack on Ledger's connector library has reportedly absconded with assets valued at nearly $484,000. While Ledger has yet to confirm the exact figures, the repercussions of the security breach are estimated to reach into the hundreds of thousands.

Several affected protocols have disabled the compromised library, and Tether took action by freezing the exploiter's address, as confirmed by Paolo Ardoino.

Source

Initially flagged on December 14 by users on Twitter, the compromise of a popular Web3 connector led to the injection of malicious code into multiple decentralized applications (DApps), affecting protocols like Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash. Users suspect the vulnerability may extend to alternative programs similar to LedgerHQ/connect-kit.

MetaMask acknowledged the hack's impact on its users, promptly deploying a fix for those on version v2.121.0. Ledger, which replaced the malicious file with the genuine version three hours post-incident, cautions users to verify transaction details on both their Ledger device and computer/phone screens, emphasizing the importance of matching information.

Resources:

X