Ledger crypto wallet pledges to reimburse users following Connect Kit exploit

Ledger says some $600k in assets were stolen from users blind signing on EVM DApps, and that it will ensure all victims are "made whole," while Blind Signing will be disallowed by June 2024.

Hardware cryptocurrency wallet provider Ledger says it will reimburse all affected users in the aftermath of the Ledger Connect Kit exploit.

Ledger took to X (formerly Twitter) on Dec. 20 to announce that the firm is aware of roughly $600,000 in assets impacted or stolen from users through blind signing on Ethereum Virtual Machine (EVM) decentralized applications (DApps).

Multiple decentralized applications using Ledger’s connector library — including SushiSwap and Revoke.cash — were compromised on Dec. 14, 2023, resulting in massive losses by investors.

Read more

...

Read full story at Cointelegraph >