Ledger Connect Kit Supply Chain Attack, December 2023: What Happened & What to Check
A compromised npm package injected a wallet drainer into every dapp loading Ledger Connect Kit from the CDN — regardless of whether…
Wallet drainer
Atomic Wallet User Fund Theft, June 2023: What Happened & What to Check
Funds were drained from Atomic Wallet users across multiple chains. The root cause has never been conclusively published.
BadgerDAO Front-End Injection, December 2021: What Happened & What to Check
A compromised Cloudflare API key let attackers inject approval-harvesting script into the BadgerDAO front end. The contracts were never touched.