Ledger Connect Kit hack on 2023-12-14
Hack on Ethereum, 14 Dec 2023. Last verified 4 Nov 2026.
notable
Reported loss
Not stated
no amount published
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Ethereum
Summary
On 2023-12-14 an attacker who had phished a former Ledger employee published a malicious version of the Ledger Connect Kit library that injected drainer code into EVM dapps, tricking some users into signing draining transactions. Tether froze the attacker's USDT.
- Protocol
- Ledger Connect Kit
- Type
- Hack
- Reported loss
- not stated
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | 14th of December 2023 | ledger.com ↗ |
| Cause | former employee phished on 2023-12-14 | ledger.com ↗ |
| Frozen | Tether froze the attacker's USDT | ledger.com ↗ |
Primary sources
- Ledger: Security incident report ↗ post-mortem · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram