- Ledger pledges compensation after $600k exploit, prioritizing user security.
- It will discontinue Blind Signing, ensuring Clear Signing for enhanced user protection.
- Pascal Gauthier vows to make affected users whole by February 2024.
Crypto hardware wallet provider Ledger has assured compensation for users affected by the recent Ledger Connect Kit exploit. In an official statement on, Ledger acknowledged a loss of around $600,000 due to blind signing on Ethereum Virtual Machine (EVM) DApps.
The company tweeted, “We are 100% focused on following up to last week’s security incident, making sure incidents like this are prevented in the future, and that the ecosystem remains safe.”
Ledger commits to making affected victims whole, working with DApp ecosystem for Clear Signing, and discontinuing Blind Signing with Ledger devices by June 2024. CEO Pascal Gauthier reaffirmed the commitment to compensate users, even those not using Ledger devices, by the end of February 2024.
For enhanced security, Ledger advises users who signed transactions on affected DApps on December 14, 2023, to revoke authorized transactions. By June 2024, Ledger devices will no longer support Blind Signing, aiming to work with the community and DApp ecosystem for Clear Signing.
The exploit impacted various DApps, including SushiSwap and Revoke.cash, causing significant losses. Ledger’s pledge to reimburse victims and enhance security protocols demonstrates its commitment to maintaining the integrity of its ecosystem.
Ledger emphasized that Ledger devices and Ledger Live were not affected by the exploit, assuring users of their continued security. Users potentially affected are encouraged to reach out to Ledger’s Help Center for assistance.
