Ledger Connect Kit Exploit Exposes DApp Users to Wallet Draining Attack: Timeline, Root Cause Analysis, and Preventive Measures

On the 14th of December 2023, Ledger, a prominent hardware wallet provider, detected an exploit that targeted DApps utilizing the Ledger Connect Kit. This exploit involved the injection of malicious code into the affected DApps, deceiving users into signing transactions…