Ledger to Change Transaction Signing Process After the Connect Kit Exploit

Ledger announced it will implement changes to transaction signing process after the Dec. 14 exploit in the Ledger Connect Kit software library.

Ledger said on its official X account:

We are aware of approximately $600k in assets impacted, stolen from users blind signing on EVM DApps. Ledger will make sure victims affected will be made whole, and are committing to work with the DApp ecosystem to allow Clear Signing, and no longer allow Blind Signing with Ledger devices by June 2024.

Ledger commits to work with Dapps ecosystem to allow clear signing so users can verify all transactions on Ledger devices before signing.

Blind signing refers to a process when a user is presented with raw data, interpretable by computers but unreadable to humans, too approve on-chain transactions, while clear signing summarizes a transaction for a user to review and understand before executing it.