Ledger Exploit Endangers DeFi, Sushi Says 'Do Not Interact With ANY dApps'

Several Ethereum-based decentralized applications (dapps), including Zapper, SushiSwap, Phantom, Balancer, and Revoke.cash, were compromised due to a security breach at Ledger, a Paris-based crypto hardware wallet manufacturer. Ledger has fixed the malicious code and warned users to "Clear Sign" transactions to ensure they are interacting directly with the company's website and software. The extent of the damage and the amount of money lost is not yet known, but reports suggest that the exploit is widespread. The breach highlights the need for proper auditing and testing in the decentralized finance (DeFi) ecosystem, where financial software is frequently deployed without appropriate measures.

Ledger Vulnerability

Original Link

Comments

All Comments

Recommended for you

Paradigm ·

Reth Execution Extensions

Reth is an all-in-one toolkit for building high performance and customizable nodes. We recently published our performance roadmap for improving Reth’s performance >100x, and Reth AlphaNet, our testnet rollup for pushing Reth’s modularity and extensibility to the limits.
Cointime精选 ·

Measuring Exchange Quality And ‘Fake Volume’

A framework to assess the quality of centralized exchanges (CEX's)
CryptoQuant CEO: BTC needs to remain above $80,000 for miners to remain profitable after halving

Bitcoin mining revenue significantly decreased in May due to the impact of the fourth Bitcoin halving event. On May 1st, the total revenue from block rewards and transaction fees reached a new low of only $26.3 million.CryptoQuant CEO Ki Young Ju calculated that, based on current conditions, Bitcoin needs to stay above $80,000 for miners to remain profitable after the halving. However, most miners have taken proactive measures to upgrade their mining equipment to lower long-term operating costs and remain competitive.
Cointime精选 ·

BitVM – The first real path to Bitcoin Layer-2s

The recent approval of Bitcoin spot ETFs and bullish BTC price action have become a catalyst for heightened interest in the Bitcoin ecosystem. A myriad of projects aiming to improve Bitcoin’s scalability have been introduced in recent times, the most exciting of them being BitVM.
Chairman of the Russian State Duma Financial Market Committee: I do not support a complete ban on the circulation of cryptocurrencies in Russia

Anton Gorelkin, Chairman of the Financial Market Committee of the Russian State Duma, said that he does not support a complete ban on the circulation of cryptocurrency in Russia. He explained in a post on Telegram that this restriction is not intended to ban the use of all cryptocurrencies, but rather to regulate the establishment of cryptocurrency exchange platforms within the legal framework of Russia. Anton Gorelkin also believes that the establishment of a legitimate cryptocurrency infrastructure in Russia is influenced by geopolitical realities, and this requires consideration of factors related to international relations. He further added that allowing such infrastructure may expose Russian companies to Western sanctions. In addition, Anton Gorelkin pointed out that this restriction may be lifted in the future, and users can still use foreign cryptocurrency exchanges and over-the-counter trading services as before. However, the impact on many over-the-counter cryptocurrency services in Moscow is still uncertain.
Hong Kong Exchanges and Clearing Limited: The total market value of Bitcoin and Ethereum futures ETFs reached HK$1.2 billion in the first quarter, with an inflow of HK$592 million

According to data disclosed by Brian Roberts, head of securities product development at the Hong Kong Stock Exchange, shows that after the approval of virtual asset futures ETFs for public offering in Hong Kong by the China Securities Regulatory Commission on October 31, 2022, three virtual asset futures ETFs investing in Bitcoin and Ethereum futures were listed on the Hong Kong Stock Exchange. Since their launch, these ETFs have been popular with investors and have a high trading volume. The daily trading volume has increased from HKD 8.9 million in 2023 to HKD 51.3 million in the first quarter of 2024, and they have also attracted HKD 529 million in capital inflows. As of the end of March 2024, the total market value has reached HKD 1.2 billion, an annual increase of 255%.
Cointime May 5th News Express

1.The Federal Reserve reduced its balance sheet by $77 billion in April, and the size of its balance sheet fell below $7.4 trillion2.Former Bitmex CEO: Bitcoin will trade between $60,000 and $70,000 before August 3.SLERF total destruction exceeds 7 million USD4.ether.fi large staker initiates pledge withdrawal application for 37,140 ETH5.Web3 digital asset company Alpha Transform Holdings makes strategic investments in Arhasi and Cloudbench 6.A trader spent 402 ETH to buy 732,326 FRIEND, with an unrealized profit of $653,0007.A certain address has sold a total of 677,197 FRIEND airdrops through BunnySwap, making a profit of approximately $1.15 million8.A multi-signature wallet withdrew 915.85 billion PEPE from Binance9.The NFT project Blob team engraved the rune EPIC•EPIC•EPIC•EPIC on the Epic Satoshi block of Bitcoin’s fourth halving10.On-Chain Analyst Predicts Six to Twelve Months of 'Parabolic Advance' for Bitcoin
cointelegraph ·

Sui Network addresses claims about its token supply

Sui maintains that its tokenomics are sound and that it uses reputable third parties to handle token storage.
cointelegraph ·

Is Bitcoin price going to crash again?

Strong technical resistance levels and a high number of profitable traders pose the risk of modest pullbacks in the Bitcoin market.
Cointime精选 ·

Radiant Protocol on Arbitrum Suffers Flashloan Attack, Resulting in $4.5M Loss: In-Depth Analysis Reveals Exploit Details

On Jan-03–2024 UTC+8:00, the Radiant protocol on Arbitrum was under the flashloan attack. The hacker attacked the #Radiant protocol 3 times, resulting in a total loss of 1.9K $ETH(worth $4.5m). The root cause is the mathematical rounding issue in the `burn` function that is amplified and used, on a new $USDC market, which makes the hacker withdraw an extra $USDC. MetaTrust Labs conducted in-depth research and analysis on the exploit, revealing how the hacker exploits vulnerability.