Maestria Blockchain

Conseils technologiques, juridiques et financiers pour projets blockchain. Formations et R&D pour les métiers du Droit, du Chiffre et de la Finance.

[Maestria Blockchain @Maestria_Chain]

Attention à vous !

[Ledger @Ledger]

FINAL TIMELINE AND UPDATE TO CUSTOMERS:

4:49pm CET:

Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again.

The investigation continues, here is the timeline of what we know about the exploit at this moment:

- This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account.
- The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet.
- Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours.
- Ledger coordinated with @WalletConnect who quickly disabled the the rogue project.
- The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use.
- For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons.
- We have internally rotated the secrets to publish on Ledger’s GitHub.
- Developers, please check again that you’re using the latest version, 1.1.8.
- Ledger, along with @Walletconnect and our partners, have reported the bad actor’s wallet address. The address is now visible on @chainalysis. @tether has frozen the bad actor’s USDT.
- We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually.
- We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time.
- We are filing a complaint and working with law enforcement on the investigation to find the attacker.
- We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d

Thank you to @WalletConnect, @Tether_io, @Chainalysis, @zachxbt, and the whole community that helped us and continue to help us identify and solve this attack.

Security will always prevail with the help of the whole ecosystem.

[Ledger @Ledger]

FINAL TIMELINE AND UPDATE TO CUSTOMERS:

4:49pm CET:

Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again.

The investigation continues, here is the timeline of what we know about the exploit at this moment:

- This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account.
- The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet.
- Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours.
- Ledger coordinated with @WalletConnect who quickly disabled the the rogue project.
- The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use.
- For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons.
- We have internally rotated the secrets to publish on Ledger’s GitHub.
- Developers, please check again that you’re using the latest version, 1.1.8.
- Ledger, along with @Walletconnect and our partners, have reported the bad actor’s wallet address. The address is now visible on @chainalysis. @tether has frozen the bad actor’s USDT.
- We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually.
- We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time.
- We are filing a complaint and working with law enforcement on the investigation to find the attacker.
- We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d

Thank you to @WalletConnect, @Tether_io, @Chainalysis, @zachxbt, and the whole community that helped us and continue to help us identify and solve this attack.

Security will always prevail with the help of the whole ecosystem.

[jcBarat @Codizlow]

Hello world 🌐

The wait is over, Testnet is now Live 🚀

Find explorer here ➡️ https://t.co/W3JlHB7cYU

For more info ➡️ https://t.co/m6DFuuWWPZ

[Tezos @tezos]

⚡️Introducing KAYO, the upcoming video game built on Tezos. ⁣
⁣
⚡️Street Fighter meets strategy in a never-seen-before simulation game.⁣
⁣
#KAYO #Tezos

[Raphaël Bloch 🐳 @Raph_Bloch]

Europeans don't get to vote on monetary policy, but they do get to choose what the banknotes will look like

Sense of priorities 😅

[Paul Frambot 🦋 @PaulFrambot]

Morpho has been very quiet over the last 9 months.
This is about to change.

[Paul Couvert @itsPaulAi]

1. Go to Microsoft Designer

(not sponsored... unfortunately!)

→ Click on the link below
→ Log in with a Microsoft account

🔗 https://t.co/lKqVnuqzco

[Maestria Blockchain @Maestria_Chain]

On a réalisé un e-book synthétique sur 8 cas concrets du #Metaverse, déjà utilisés et mis en place dans des entreprises 👇👇

Téléchargement gratuit par ici : https://t.co/Yn3KTk2Iah

[Versity @HelloVersity]

Qu'est-ce qu'un #airdrop ?
On vous explique tout dans notre dernier article :

https://t.co/YkTULv2lk6

⤵️ Dites-nous si vous avez déjà participé à un AirDrop. Si oui, quel projet ?

[Maestria Blockchain @Maestria_Chain]

Probably nothing 🙄

[Sotheby's Metaverse @Sothebysverse]

The next evolution of #SothebysMetaverse is here! The most trusted and dynamic destination to collect, buy and sell remarkable digital works.

Explore: https://t.co/hZvYIkO3xx

[Maestria Blockchain @Maestria_Chain]

Vous voulez tout savoir (ou presque) sur la #tokenomic et la #tokenisation ? Voici la vidéo du workshop de Prince Ludju sur le salon @Web3Virtuality 👇👇

https://t.co/m8L0cmaIwO

[Raphaël Bloch 🐳 @Raph_Bloch]

Starbucks, Nike, Adidas, Lacoste, Renault, Tiffany & Co., Porsche, PMU, Gucci, Spotify, Reddit, LVMH...

Some of the biggest brands are working on #Web3 and #NFTs

Probably nothing

[Raphaël Bloch 🐳 @Raph_Bloch]

Bitcoin > $30,000

Ether > $2,000

We're so back

[Raphaël Bloch 🐳 @Raph_Bloch]

Bitcoin has just crossed $30,000

It's the first time since June 2022

[Versity @HelloVersity]

⭐️ Nouveau Contest ⭐️
Testons vos connaissances de la Land Economy✏️
Le gagnant recevra la somme de 1000 SITY 🤑
Voici notre quiz :

https://t.co/qzuTNDJt2t

[PunkMe @PunkMe_]

PunkMe is an AI that turns your face into a Punk. Here is a Thread that explains how it works.👇

[Maestria Blockchain @Maestria_Chain]

Rien à ajouter.

₿.

#Bitcoin

[Maestria Blockchain @Maestria_Chain]

@Cyborg_BTC @Raph_Bloch @binance @cryptocom @circle https://t.co/5DGxylzJVI

[Maestria Blockchain @Maestria_Chain]

Plutôt bien imagé non ?

[Virtuality Web3 Summit @Web3Virtuality]

AGENDA / Day 2!
What's on #Virtuality2023 today ? 🚀
Find all the useful information around the exhibitors & conferences of the day on our website 🤩

▶️ https://t.co/NFLP5UMsp3

#Blockchain #Cryptocurrencies #DeFi #NFT #AI