Dear Customers

We are pleased to report that this incident is now resolved. We have determined that no Kiln products were affected by the faulty version of Ledger connect-kit.

All Kiln web applications are now available to use. Thanks for your patience! 

Following additional investigation we do not believe any of Kiln's products were affected by the faulty version of connect-kit. Out of an abundance of caution we plan to re-enable our web applications at 10:AM CET tomorrow.

Following Ledger's recommendations, we are waiting 24 hours for CDN caches to get rid of the faulty version of connect-kit. We are still investigating the potential impact on Kiln customers.

The Kiln dApps were not using the affected compromised library so there is no expected impact as a result of interacting with Kiln applications. We are re-rebuilding our components with the latest Ledger version of the compromised library stamped by Ledger, qualifying it on our side, before re-opening our dApps.

We expect the incident to be fully resolved in the next couple of hours.

We are freezing all our frontends due to a Ledger ConnectorKit compromission used in our dapps dependencies (wagmi). Ledger Entreprise, Live and Dashboard dapps are in maintenance mode waiting for a security patch from Ledger team.