Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Ledger’s Hardware Wallet Exploited
Crypto | Dec 15, 2023
Image: Unsplah/Azamat E
A Wake-Up Call for Crypto Security. On December 14, Ledger's Connector Kit software was exploited.
Ledger, known for manufacturing physical cryptocurrency wallets resembling USB drives and other storage devices, was compromised affecting multiple Ethereum-based applications, including Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash, due to a security breach in Ledger's system.
While the exact number of affected decentralized apps (dapps) and the total financial loss are still being assessed, anecdotal reports suggest widespread exploitation. Blockaid, a blockchain security firm, estimated losses of over $150,000 in crypto due to this unique “supply chain attack” on Ledger’s Connect Kit. Others reported the draining of over $600,000 from users' wallets.
See: Jamie Dimon Advises Government to ‘Close Down Crypto’
Ledger CEO Pascal Gauthier described the hack as an “isolated incident” and fixed the malicious code and promised stronger security controls. The exploit, which lasted less than two hours, was attributed to a phishing attack targeting a former employee. Ledger assured that their hardware and Ledger Live platform were not affected. They advised users to use the “Clear Sign” feature for transactions to ensure direct interaction with Ledger’s software.
FINAL TIMELINE AND UPDATE TO CUSTOMERS:
4:49pm CET:
Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again.
The investigation continues, here is the timeline of what we know about…
— Ledger (@Ledger) December 14, 2023
The crypto community's response, including assistance from entities like Tether and Chainalysis, highlights the collaborative effort in addressing such security breaches. These breaches not only affect individuals and projects but also tarnish the reputation of industry. Security expert Steve Gibson emphasized the need for skepticism in an industry with a history of significant hacks.
Moving On
The Ledger hack is a reminder of the ongoing challenges in ensuring the security of digital assets. Users are advised to exercise caution and stay informed about the security of their digital assets, especially when interacting with decentralized applications.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
Leave a Reply