A user fell for a counterfeit Ledger Live app on the iOS App Store and triggered an ETH withdrawal that put $450K into the 12-second unstaking queue. SEAL 911 white hats raced the attacker with a Flashbots script, won the same block, and recovered every cent for a standard 5% fee. App Store phishing is alive and well — verify wallet apps through Ledger's official channels, never search results.

TLDR by @Benthic

More on Ledger

Comments