A web2 based exploit of a Ledger library, Connect Kit, has been fixed according to Mudit Gupta, the chief information security officer at Polygon Labs.