![](https://steemitimages.com/DQmXnb8PnxCgbbu6TfagHRvjdYRNTRwzdm1QQiBi1YpqAc5/image.png)

# THE LEDGER COMPANY HAS JUST WARNED OF "MAN IN THE MIDDLE" ATTACK THAT THREATENS MILLIONS OF HARDWARE WALLETS.

### No reported cases of the attack being successfully deployed, but the threat itself is very real. 

Ledger urged the users of its cryptocurrency wallets today to take steps to avoid the address spoofing attack.

The company has  noted that: 

***"Ledger wallets generate the displayed receive address using JavaScript code running on the host machine…malware can simply replace the code responsible for generating the receive address with its own address, causing all future deposits to be sent to the attacker."***

# The solution by now is this:
![](https://steemitimages.com/DQmXnb8PnxCgbbu6TfagHRvjdYRNTRwzdm1QQiBi1YpqAc5/image.png)

To validate the receive address before every receive transaction, just like the wallet [forces] the user to approve every send transaction”.

# More Information:
[Ledger Alert](https://twitter.com/LedgerHQ/status/959766958601273344)
[Oficial documment](https://www.docdroid.net/Jug5LX3/ledger-receive-address-attack.pdf)  of the attack to Ledger

I hope this information can be useful to you, if you like, please upvote, thank you! :)

![+ FIRMA STEEMIT.jpg](https://steemitimages.com/DQmNqZyDBGwEEpfi1braobTnPRKSovpG4X9kJ6T4HRNgGkk/%2B%20FIRMA%20STEEMIT.jpg)