# Ledger Connect Kit: offboarding and runtime dependencies share a security boundary

Source: https://www.web3sec.news/blog/ledger-connect-kit-publishing
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Verify external publishing access during offboarding.
- [ ] Inventory runtime-loaded code in production pages.
- [ ] Test integration disablement and CDN propagation.
- [ ] Assess signed transactions and approvals separately from script removal.
- [ ] Rehearse publication denial for a removed test maintainer.

## References
- [Ledger: security incident report, 20 December 2023](https://www.ledger.com/blog/security-incident-report)
- [Ledger: initial CEO statement, 14 December 2023](https://www.ledger.com/blog/a-letter-from-ledger-chairman-ceo-pascal-gauthier-regarding-ledger-connect-kit-exploit)