Hack history / 2023 / Hack or exploit
Ledger Connect Kit
Hack or exploit on Dec 14, 2023 · Supply Chain Attack
SOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$600K
sources: $484K to $610K
Returned
none listed
as the sources state it
Rank
#1,083
among thefts by dollars lost
What happened
Attackers compromised a former Ledger employee's NPMJS account via phishing and published malicious versions of Ledger Connect Kit (1.1.5, 1.1.6, 1.1.7) containing Angel Drainer malware. The code rerouted user transaction approvals through rogue WalletConnect instances for less than two hours before detection.
Details
- Date
- Dec 14, 2023
- Kind
- Hack or exploit
- Method
- Supply Chain Attack
- How in
- Keys, accounts and infrastructure
- Target
- Wallet
- Chains
- Ethereum
Related incidents
Ledger (Supply Chain) 2026 · Hack or exploit · $93M
Aztec Connect 2026 · Hack or exploit · $2.1M
Users lose $9.5 million to fake Ledger wallet app on the Apple App Store 2026 · Hack or exploit · $9.5M
Fake Ledger Live Web3 2023 · Hack or exploit · $588K
Ledger 2020 · Hack or exploit · $271K
Aztec Connect 2026 · Hack or exploit · $2.1M
Users lose $9.5 million to fake Ledger wallet app on the Apple App Store 2026 · Hack or exploit · $9.5M
Fake Ledger Live Web3 2023 · Hack or exploit · $588K
Ledger 2020 · Hack or exploit · $271K
Cite this page
SwanBluechip, "Ledger Connect Kit hack, Dec 14, 2023: $600K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht04bb081449/ (data as of 2026-10-31).