The Ledger Saga: How it was done (Part 3)

Ledger Connect Hacker Dupes Users into Funding Their Crypto Heist

Imagine opening your DeFi app and unknowingly granting permission for someone else to drain your funds. That’s exactly what happened on December 14th, when a hacker exploited a vulnerability in Ledger Connect, a popular tool for connecting Web3 apps to users’ wallets. By tricking users into approving malicious transactions, the attacker siphoned away at least $650,00++ in digital assets.

How the Hack Worked:

1. Phishing Trap: The hacker compromised a former Ledger employee’s computer, gaining access to their node package manager account. This allowed them to upload malicious code to Ledger Connect’s GitHub repository.

2. Infected Apps: Some Web3 apps, including SushiSwap, Zapper, and Phantom, unknowingly updated to the tainted version of Ledger Connect. This distributed the malicious code to users’ browsers.

3. Deceptive Approval: The malicious code displayed confusing transaction data, making it difficult for users to understand what they were approving. In some cases, the attacker’s address appeared instead of the app’s, further blurring the lines.

4. Drained Wallets: Victims unknowingly granted the attacker permission to spend large amounts of their crypto, resulting in substantial losses. For instance, one user unwittingly approved the attacker to spend over $10,000 in USD Coin.

The Aftermath and Lessons Learned:

– This attack highlights the vulnerability of relying on centralized tools like Ledger Connect. Cyvers, a blockchain security platform, warns that the exploit could potentially affect the entire Ethereum ecosystem.

– While avoiding such scams is challenging, Cyvers suggests carefully scrutinizing transaction confirmation messages and using tools like theirs to check contract addresses for potential security risks.

– The industry still has a long way to go in developing better security measures and user-friendly interfaces to prevent such attacks.

Remember:

– Be vigilant when interacting with DeFi apps and carefully review all transaction details before approving anything.

– Consider using security tools that can help identify potential threats.

– The responsibility for your crypto safety ultimately lies with you. Be cautious and informed!