🔐 Cybersecurity News (December 15, 2023):
1️⃣ Ledger: Hardware wallet developer #ledger has reported a compromise of the software library used by decentralized applications. A hacker managed to inject malicious code into their interfaces. On December 14, the attacker replaced the authentic Ledger Connect Kit with a fake one. The attack did not affect users' physical devices and the Ledger Live application. 🔒
2️⃣ Justice: The U.S. Department of Justice has unveiled charges against two men suspected of orchestrating a $25 million Ponzi scheme related to digital assets. According to court documents, David Gilbert Shaffron from Australia and Vincent Anthony Mazzotta Jr. from California conspired to defraud investors. Their scam scheme promised a "guaranteed income" of 300% in three weeks, equating to an annualized return of 186,000,000%. ⚖️
3️⃣ The Block: Due to a flawed multisig transaction scenario, DeFi protocol Yearn Finance lost 63% of treasury funds in the Lp yCRV pool. According to reports, the incident occurred during the "routine process of token conversion fees" and resulted in the exchange of 3,794,894 yCRV for 779,958 yvDAI. The losses amounted to $1.4 million. 💸
4️⃣ Justice: The #hacker responsible for hacking into the protocol of income farming service Nirvana Finance and an unnamed DEX has pleaded guilty and agreed to forfeit $12.3 million in stolen assets. According to the US Attorney's Office, 34-year-old senior security engineer Shakib Ahmed, 34, exploited a vulnerability in an unnamed exchange's smart contract in the summer of 2022. 🌐
5️⃣ TRM Labs: Cryptocurrency project losses from hacking incidents in 2023 have decreased by over 50% compared to the previous year. However, the number of attacks remains stable. This is largely attributed to enhanced #security measures, active involvement of law enforcement, and improved industry coordination in the digital asset sector. 🛡️
🚀 What's your perspective on the recent events?