Sushi CTO: A Web3 connector has been compromised, it is recommended to temporarily suspend interaction with all DApps

Sushi's Chief Technology Officer, Matthew Lilley, issued a warning on social media that Sushi has been attacked by a front-end vulnerability. A commonly used Web3 connector appears to have been compromised, allowing injection of malicious code that can affect numerous DApps. Users are advised not to interact with any dApp until further notice.

The suspicious code originates from the GitHub page of hardware wallet provider Ledger. A user named X pointed out that Ledger's library has been compromised and replaced by a token spender.