Don't use dApps until a patch has been deployed !

Ledger library hit by hack this day. Numerous dApps compromised and it is strongly advised not to interact with dapps until new Ledger declarations have been made.

It was Sushi's CTO who gave the hack alert at 2pm about the Web3 Ledger Connect connector widely used by dApps, the Ledger Connect library on GitHub contains mailveillant code.

The front-end attack modifies the user interface (connector) of dApps websites. The attackers succeed in draining funds to their own accounts. This attack does not allow access to your wallet, but redirects your tokens when interacting with the dApps. The suspect code is said to come from Ledger's GitHub page, with several lines related to a token drainer.

Be extremely vigilant and postpone your interaction with dapps until tomorrow.

Many tweets are already reporting that funds have been siphoned off in the last few hours. Proceed with the utmost caution.

Ledger has just communicated on X and must keep users informed.

Kepp inform from official channel.