Summary

Hardware wallet manufacturer Ledger has fixed a vulnerability in its Ledger Connect Kit and pledged to compensate customers affected by a security incident. The vulnerability led to fraudulent transactions on various decentralized applications (DApps). Ledger plans to eliminate the use of blind signing on all its devices by June 2024 and has introduced “Clear Signing” in collaboration with the DApp ecosystem to enhance transaction security.

Introduction

Hardware wallet manufacturer Ledger has taken swift action after user reports of fraudulent transactions on DApps, resulting from a vulnerability in its Ledger Connect Kit. The company has committed to compensating affected customers and has announced a major policy shift to improve security and eliminate blind signing on its devices.

Main Points

• Ledger fixed a vulnerability in its Ledger Connect Kit and will compensate customers impacted by the security incident.
• DApps like SushiSwap and Revoke.cash were compromised due to the vulnerable Ledger connector library.
• Ledger plans to eliminate blind signing on all its devices by June 2024.
• The company has introduced “Clear Signing” in collaboration with the DApp ecosystem to enhance transaction security.

Conclusion

Ledger’s response to the security incident demonstrates its commitment to customer safety and security. By compensating affected customers and implementing a major policy shift, Ledger aims to improve security and prevent similar vulnerabilities in the future. The introduction of “Clear Signing” in collaboration with the DApp ecosystem further enhances transaction security for Ledger users.