Backdoor Code Found in Ledger Crypto Wallet Library, Source Unknown

·1 views

A malicious backdoor has been discovered within a library used by Ledger cryptocurrency wallets. The compromised code, found in the 'Wallet Connect' library, could allow an attacker to drain a user's funds. The identity and motive of the party who planted the backdoor remains unclear at this time. The incident highlights a significant supply chain vulnerability in the crypto ecosystem. Security researchers are investigating the source of the unauthorized modification.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Security advice for small teams facing vendor security questionnaires

A guide provides a six-step process for small businesses to efficiently handle detailed vendor security questionnaires. It advises teams to first clarify which sections are relevant and to create a concise security overview document. The process involves honestly assessing existing controls, implementing quick technical fixes, and reusing answers for future questionnaires. The article, published by Security Answer Kit, details a method that does not require formal certifications.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer rebuilds Next.js marketplace to address 6-second page load delays

A developer created Farmora, a farm-to-door marketplace portfolio project using Next.js. The platform allows farmers to list produce and customers to purchase directly, with a 10% commission retained by the admin. The initial version suffered from page load times of up to six seconds while waiting for backend calls. To improve performance, the developer redesigned it as a local-first application that responds immediately using cached and local data. Firestore database queries now refresh in the background with a timeout, reducing perceived delays.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer shares costly lesson after $150 Cloudflare overpayment

A developer creating an app for flight monitoring shared a story of an unexpected $150 bill from Cloudflare. The overpayment occurred due to a billing structure that separates database reads and writes. While heavily optimizing API usage, the developer inadvertently performed roughly 150 million database writes in a month, exceeding the plan's limits. This incident highlighted the importance of monitoring all billing parameters and setting up alerts for cloud services.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS Lambda Web Functions allow direct deployment of Node.js web servers like Hono.

AWS Lambda now offers a deployment option called Web Functions. This allows Node.js web servers, such as Hono, Express, or Fastify, to run on Lambda without requiring a Lambda-specific adapter layer. The feature is available in Node.js 24 on Arm64 runtimes at launch. However, the new model has a distinct runtime, networking, and billing structure that requires evaluation. Developers must assess their application's architecture and workload to determine if Web Functions are a suitable fit.

0 comments Read more at DEV Community