Case File: The Ledger Connect Kit Supply-Chain Incident of 2023
A historical review of malicious connector releases and the importance of a separate signing checkpoint.
The basics / Common methods / Practical checks
THE BASICS / COMMON METHODS / PRACTICAL CHECKSAccount permissions and token approvals grant different kinds of access. This collection connects permission structures, spending limits and ways to read public evidence. Each article explains its own scope and sources.
Read “Multisig alone is not a risk verdict”, then use “Tracing the evidence after an unexpected approval” to build a checklist.
A historical review of malicious connector releases and the importance of a separate signing checkpoint.
TronLink's updated documentation describes alerts for transactions, allowances and account permissions.
An August explainer describes transaction checks, simulations and the limits readers should keep in mind.
Trezor's September announcement brings readable confirmation to supported devices and EVM interactions.
Bounded delegations make the initial consent screen central to subsequent wallet actions.
Automatic revocation uses delegated authority. Here is what the published design does and does not cover.
MetaMask's September announcement adds an execution-time condition to supported transaction previews.
Read the configuration before deciding who can perform which actions.
Check the token, spender and limit against the action you intended.