‘Wallet drainer’ code added to Ledger library has crypto on edge

A suspected “supply chain attack” on Ledger ConnectKit may leave dapp users open to loss of funds source: https://blockworks.co/news/ledger-wallet-vulnerability-connectkit