🚨🚨🚨 DON'T USE ANY DAPP(Ledger's ConnectKit library compromised)

[Gladitorcomeback]

Will Ledger be liable for this lost? Is there any announcement of reimbursement of the hacked funds? If there's none, then it's time to drop Ledger products. The more they want to expand their products the shittier they get. What a shame!

Yes reimbursing announcement already made in their tweet because ledger almost lost the trust but still there is no any best competitive of it this why still they ledger service is surviving. They are working on the signing transaction display where user will given details(how much fee will be charged, hidden fee and many other features) while signing. I think it will help experienced user to be safe in future but newbies will still repeat the same mistake.

What do you think?


https://twitter.com/Ledger/status/1737457365526470665?t=K575T1x6Lk4P95WRepOMnw

[1715108696]

1715108696

[1715108696]

1715108696

[1715108696]

1715108696

[1715108696]

1715108696

[1715108696]

1715108696

[dkbit98]

Yesterday ledger-recover, today ledger-connect, and tomorrow we are going to have another ledger ''surprise''  
How about if I make one better suggestion, don't use ledger wallet and shitcoins at all, than I can guarantee you will be much safer and you won't have to worry so much.

What do you think?

I think they are assholes, and this trick won't help them much.
They say in 2024 no more blind signing, yeah right... that means that most of their devices will be discontinued...think about that.

[albon]

Yesterday ledger-recover, today ledger-connect, and tomorrow we are going to have another ledger ''surprise''  
How about if I make one better suggestion, don't use ledger wallet and shitcoins at all, than I can guarantee you will be much safer and you won't have to worry so much.

I completely agree with you; abandoning the Ledger wallet is better.

What happened before, and what was mentioned by OP in his topic, indicates their failure and inability to safeguard their clients' funds. They were not vigilant enough to address the Ledger ConnectKit incident promptly. The malicious version remained active for five hours, causing significant financial losses for their clients. Personally, I've lost confidence in this hardware wallet and can't keep even a single dollar in it. There are open-source and reliable alternatives instead of this expensive wallet, which is not free from technical issues and strange incidents. How can a company the size of Ledger not prevent a former employee from accessing NPMJS? What negligence is this? I do not think that the saying that Ledger is one of the best and most secure cold wallets will last long.