Comments (2)
Adamj1232
commented on July 2, 2024
Blocknative’s Web3-Onboard pulls in the latest Ledger Connect Kit update. It is now pulling in 1.1.8. Please ensure you are using the latest version of Web3-Onboard let us know if you have any questions
We are working closely with the Ledger team as they improve and update their processes for the Ledger dependencies.
According to the Ledger team the malicious software was only delivered for 5 hours and believed to only be active for two - https://twitter.com/Ledger/status/1735326240658100414
Also for avoidance of doubt:
To confirm you are on the latest version, load dapp, select Ledger from the Web3-onboard option, open developer console, select Sources tab and expand the folder shown in the image below.
from web3-onboard.
clathrop
commented on July 2, 2024
Can you address whether or not users utilizing the ledger connect kit via web3-onboard are potentially still vulnerable due to browsers cacheing the delivered package? Seems like the max-age for the package is 7 days. If a user doesn't clear his or her cache they could be loading the malicious package. Be safe out there.
from web3-onboard.
Related Issues (20)
- Sveltekit example does not work with vercel HOT 3
- How can I bypass account selection when refresh page?
- Merge
- Hola
- Sígueme
- Cesar
- [Feature]: enableMobileWalletLink for @coinbase/wallet-sdk HOT 2
- Non-existing Inter font was used HOT 2
- Walletconnect with coinbase wallet does not work from android device.
- injectedModule bug: "Cannot assign to read only property 'request' of object '[object Object]'" HOT 14
- Documentation mention wrong package `@web3-onboard/injected` HOT 4
- [Feature]: eip1271
- [BUG]: Event when user disconnects all wallets HOT 2
- [Feature]: Compatibility with Flutter
- thanks
- [Feature]: ALI Token Support
- connectWallet with autoSelect disables all wallets list
- [Feature]: Bloom Wallet Integration HOT 1
- curl -X GET "https://api.w3.org/ecosystems" -H "accept: application/json"
- WalletConnect not working with my custom evm chain
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from web3-onboard.