Your funds are safe from the NPM supply chain attack

Hey Lantern Community!

You might have seen the headlines this week about the massive JavaScript hack that targeted crypto users.

Attackers took control of packages used in millions of projects and embedded code to intercept browser-based crypto activities, redirect transactions to attacker wallets, and steal authentication tokens.

The scary part? These packages are often transitive dependencies, meaning they could affect projects without developers even knowing they installed them.

Well, Lantern customers didn't lose a single satoshi.

Not one.

But first, market update!

Why Lantern's security architecture made this attack irrelevant

While other platforms scrambled to assess their exposure, we didn't even flinch.

Here's why:

Because we don't use smart contracts where these exploits can occur, we rely on cold storage custody (aka the safest way to hold crypto).

Think about what happened:

• The malware targeted "browser-based crypto and Web3 activities" and wallet APIs

• It was designed to intercept and redirect transactions in real-time

• Companies had to purge caches, rebuild projects, and verify all their dependencies

None of this affected Lantern because:

✅ Your crypto never touches smart contracts or browser wallets

✅ We use institutional-grade cold storage with BitGo

✅ Multi-signature security that requires multiple parties to authorize any movement

The difference between "crypto native" and "crypto safe"

Many lending platforms pride themselves on being "crypto native". Built entirely on smart contracts and DeFi protocols.

We chose a different path: crypto safe.

While others chase complex DeFi strategies that expose your collateral to:

• Smart contract bugs

• Bridge exploits

• Protocol hacks

• Supply chain attacks (like this one)

We focused on one thing: keeping your crypto secure.

Security isn't sexy, but it's everything

We know cold storage isn't exciting.

But when attacks like this happen, you'll sleep soundly knowing your collateral is protected by institutional-grade security that's been battle-tested by the largest crypto companies in the world.

While others chase yield, we protect wealth.

The Lantern Team