FINAL TIMELINE AND UPDATE TO CUSTOMERS: 4:49pm CET: Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again. The investigation continues, here is the timeline of what we know about the exploit at this moment: - This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account. - The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet. - Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours. - Ledger coordinated with @WalletConnect who quickly disabled the the rogue project. - The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use. - For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons. - We have internally rotated the secrets to publish on Ledger’s GitHub. - Developers, please check again that you’re using the latest version, 1.1.8. - Ledger, along with @Walletconnect and our partners, have reported the bad actor’s wallet address. The address is now visible on @chainalysis. @tether has frozen the bad actor’s USDT. - We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually. - We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time. - We are filing a complaint and working with law enforcement on the investigation to find the attacker. - We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d Thank you to @WalletConnect, @Tether_io, @Chainalysis, @zachxbt, and the whole community that helped us and continue to help us identify and solve this attack. Security will always prevail with the help of the whole ecosystem.

🚨We have identified and removed a malicious version of the Ledger Connect Kit. 🚨 A genuine version is being pushed to replace the malicious file now. Do not interact with any dApps for the moment. We will keep you informed as the situation evolves. Your Ledger device and Ledger Live were not compromised.

No need to panic over assets sitting in wallets. This is not a smart contract vulnerability; it's not related to thirdweb's. The vulnerability is in Ledger's Library, which MANY sites use: twitter.com/bantg/status/173…. It can only affect you when you transact or sign on Web3 sites that use that library since the hack happened.

⚠️⚠️⚠️⚠️⚠️⚠️ Warning: Multiple popular crypto applications that integrate with Ledger's ConnectKit library, including Revoke.cash have been compromised. We temporarily took the website offline as we're investigating further. We recommend not using *any* crypto website at all while this exploit is ongoing.

Just recently @NeoTokyoCode citizens via our holder exclusive community made launch pad @NTLaunchpad got to seed invest in @TheTreeverse. AKA what I think will be one of the hottest game tokens/projects next year. In just a few days they will get @BloodLoopGAME and then @TheReadyGames. If you've seen some of the huge "non-dropped" projects that have been joining you can probably guess the ones that are coming next as well. This is just the tip of the ice berg and what's "announced" so far. NT will not stop grinding to be the absolute #1 place in crypto gaming for networking, alpha and access. Being outside the citadel is being outside crypto gaming and poorly positioned when the REAL gaming bull run starts.

GM @internetmoney03, you're now on the official @The333Club Twitter List! 🤜 🤛 #333Follow333 x.com/i/lists/15718872970120…

You’re witnessing the accelerated fall of an empire. This year expect major escalation with Russia and China for driving global de-dollarization. When the US can no longer fund its debt with money printing it will collapse under the weight of its current debt. It’s happening now.

Just found out that an ostrich chick costs $525 at 30-60 days old. Adults lay 2 eggs per week (equivalent to 50 chicken eggs) but an adult ostrich is worth $7500-$10k Y’all… I’m about to start flipping ostriches.

I created a 3k word Notion Guide on the EXACT process I used to write 100 threads for my clients in under a week. FREE for the next 24 Hours (usually $99) RT and comment "robots" and I'll dm it to you. (must be following for dm)

The war on children intensifies.

16.The government was in constant contact not just with Twitter but with virtually every major tech firm.