Security News Ledger dApp supply chain attack steals $600K from crypto wallets BleepingComputer Daniel Bender Dec 14, 2023 Ledger is warnings users not to use web3 dApps after a supply chain attack on the 'Ledger dApp Connect Kit' library was found pushing a JavaScript wallet drainer that stole $600,000 in crypto and NFTs.