Ledger to reimburse victims of the Connect Kit exploit

December 21, 2023 02:04 AM AEDT | By Invezz

Ledger to reimburse victims of the Connect Kit exploit — Image source: Invezz

Reimbursement to be done by February 2024

A security incident report Ledger published on December 20 says the Connect Kit exploit had injected malicious code dApps. Users were tricked into signing transactions, allowing the attacker to drain their wallets. Although Ledger quickly detected the incident, a number of users had already fallen victim.

“Ledger will make sure victims affected will be made whole, and are committing to work with the DApp ecosystem to allow Clear Signing, and no longer allow Blind Signing with Ledger devices by June 2024,” the company noted via its official X account.

The commitment follows an earlier pledge by Ledger CEO & Chairman Pascal Gauthier that the hardware wallet maker will ensure all victims are made whole. Today’s announcement reaffirmed this:

“We commit, by any way possible, including gestures of goodwill, to make sure this is done by the end of February, 2024. We are already in contact with many impacted users and are actively working through the specifics with them.”

While users have been asked to revoke transactions authorised to affected dApps as part of “best security practices,” the company is looking to collaborate with developers and other industry players to support Clear Signing.

As opposed to Blind Signing, Clear Signing allows users to verify every transaction on their device. Ledger says it will end Blind Sign on its devices by June 2024.

The company has also assured users that its hardware devices and Ledger Live “were not made vulnerable by this exploit.

The post Ledger to reimburse victims of the Connect Kit exploit appeared first on Invezz

Disclaimer

The content, including but not limited to any articles, news, quotes, information, data, text, reports, ratings, opinions, images, photos, graphics, graphs, charts, animations and video (Content) is a service of Kalkine Media Pty Ltd (Kalkine Media, we or us), ACN 629 651 672 and is available for personal and non-commercial use only. The principal purpose of the Content is to educate and inform. The Content does not contain or imply any recommendation or opinion intended to influence your financial decisions and must not be relied upon by you as such. Some of the Content on this website may be sponsored/non-sponsored, as applicable, but is NOT a solicitation or recommendation to buy, sell or hold the stocks of the company(s) or engage in any investment activity under discussion. Kalkine Media is neither licensed nor qualified to provide investment advice through this platform. Users should make their own enquiries about any investments and Kalkine Media strongly suggests the users to seek advice from a financial adviser, stockbroker or other professional (including taxation and legal advice), as necessary. Kalkine Media hereby disclaims any and all the liabilities to any user for any direct, indirect, implied, punitive, special, incidental or other consequential damages arising from any use of the Content on this website, which is provided without warranties. The views expressed in the Content by the guests, if any, are their own and do not necessarily represent the views or opinions of Kalkine Media. Some of the images/music that may be used on this website are copyright to their respective owner(s). Kalkine Media does not claim ownership of any of the pictures displayed/music used on this website unless stated otherwise. The images/music that may be used on this website are taken from various sources on the internet, including paid subscriptions or are believed to be in public domain. We have used reasonable efforts to accredit the source wherever it was indicated as or found to be necessary.