LottieFiles revealed a supply chain compromise in which malicious code could lure users into connecting crypto wallets, potentially leading to asset theft.

LottieFiles, a platform that enables designers and developers to create animations, has issued a warning regarding a security breach involving its npm package, which may expose users to malicious code designed to compromise crypto wallets.

In an X post on Oct. 31, LottieFiles said that the affected versions — Lottie Web Player 2.0.5, 2.0.6, and 2.0.7 — were released on Oct. 30, prompting immediate concerns after multiple user reports surfaced about strange code injections. In response to the threat, LottieFiles released a new version, 2.0.8, reverting to the secure code.

“A large number of users using the library via third-party CDNs without a pinned version were automatically served the compromised version as the latest release.”

LottieFiles

For those unable to update, LottieFiles recommends informing end users about potential fraudulent wallet connection prompts associated with the Lottie-player. Users may also opt to remain on version 2.0.4 to avoid risk.

LottieFiles warned that applications using the compromised npm package may inadvertently prompt users to connect their crypto wallets, opening avenues for potential theft. The developer account linked to the malicious uploads has been stripped of access, and related tokens have been revoked to halt any further unauthorized activity, the firm added, though the full extent of the attack remains unknown.

Zodia Custody, a leading digital asset custodian backed by Standard Chartered, has launched its latest product, Unified Wallets today. The product focuses on boosting operational efficiency for institutional clients. Notably, this move comes as the firm partners with Galaxy Digital to expand its custody solutions.

Meanwhile, the new wallet feature allows institutions to pool assets and streamline transactions without compromising security, making it a game-changer for digital asset managers.

Standard Chartered Backed Zodia Custody Launches Wallet

Zodia Custody’s Unified Wallets offer a significant leap in digital asset management. The new solution allows institutions and fund managers to pool funds from various clients into individual wallets, simplifying transaction processing.

Notably, this innovation reduces costs, ensures smooth transfers, and enhances operational efficiency for businesses dealing with digital assets. By partnering with financial institutions like Galaxy Digital, the firm positions itself as a leader in the institutional digital asset space.

Meanwhile, the Unified Wallets system allows businesses to track deposits in real time and quickly withdraw assets from a cold wallet, all without sacrificing control or security. Zodia’s CEO Julian Sawyer emphasized this, stating that Unified Wallets combine the flexibility of omnibus wallets with the security of segregated assets, making it ideal for optimizing operations in the digital asset sector.

It’s worth noting that Galaxy Digital is the first to implement this feature, marking a milestone in Zodia Custody’s expansion into more sophisticated digital asset management. Andrew Taubman, Deputy Chief Operations Officer at Galaxy, praised the partnership, noting that the firm’s approach enhances their trading operations while maintaining top-tier security.

Strengthening Partnership With Galaxy Digital

Zodia Custody’s partnership with Galaxy Digital showcases its dedication to delivering secure and scalable solutions for institutional investors. As institutional engagement with digital assets grows, custodians like the firm need to offer solutions that balance operational efficiency with strong security measures.

The company’s clients like Galaxy, can now enjoy the benefits of the Unified Wallets alongside Zodia’s other offerings, such as the unique Interchange service. This feature allows sophisticated investors to choose their preferred trading venues while benefiting from off-venue settlement for market makers and OTC desks.

In addition, this enhances the flexibility of trading and settlement processes, providing clients with more control over their assets. Sawyer believes the growing adoption of Zodia Custody’s solutions reflects the strength of the platform. Besides, it also gained notable traction as investors often look for the top crypto wallets to safely keep their holdings.

He stressed that the company’s products are designed to meet the unique needs of digital asset businesses, providing the flexibility, security, and operational ease that today’s institutional investors demand.

✓ Share:

Rupam Roy

Rupam is a seasoned professional with three years of experience in the financial market, where he has developed a reputation as a meticulous research analyst and insightful journalist. He thrives on exploring the dynamic nuances of the financial landscape. Currently serving as a sub-editor at Coingape, Rupam’s expertise extends beyond conventional boundaries. His role involves breaking stories, analyzing AI-related developments, providing real-time updates on the crypto market, and presenting insightful economic news.
Rupam’s career is characterized by a deep passion for unraveling the complexities of finance and delivering impactful stories that resonate with a diverse audience.

Disclaimer: The presented content may include the personal opinion of the author and is subject to market condition. Do your market research before investing in cryptocurrencies. The author or the publication does not hold any responsibility for your personal financial loss.