Ledger
Security incidents tagged Ledger. Newest first.
0 Ledger incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 1043
- Longest quiet run: 1044 days (Dec 15–Oct 23)
Show 1 older incident1 older incident
December 2023 1
- Patched
Ledger Connect Kit npm package hijacked to drain crypto wallets
Attackers phished a former Ledger employee's npm account and published malicious @ledgerhq/connect-kit versions 1.1.5 to 1.1.7. Because many dApps load it from a CDN without pinning a version, their users were shown wallet-drainer prompts. Ledger shipped a clean 1.1.8 within about 40 minutes of finding out.
@ledgerhq/connect-kit (npm)Closed Dec 14, 2023
