Eli Tan Eli is a news reporter for CoinDesk. He holds ETH, SOL and AVAX. Follow @ elitanjourno on Twitter Sam Kessler Sam is a reporter at CoinDesk focused on decentralized technology, DeFi and DAOs.
He owns ETH, BTC and MATIC. Follow @ skesslr on Twitter The Solana ecosystem appears to be the victim of crypto’s latest exploit, with users reporting that their funds have been drained without their knowledge from major internet-connected “hot” wallets including Phantom, Slope and Trust Wallet. Several Solana addresses have been linked to the attack so far ( 1 , 2 , 3 , 4 ), with those wallets draining at least $5 million worth of SOL, SPL, and other tokens from unsuspecting users.
The attack is still ongoing. “We are evaluating the incident impacting Solana wallets and are working closely with other teams in the ecosystem to get to the bottom of this. We will issue an update once we gather more information,” a representative of Phantom told CoinDesk in a statement.
“The team doesn’t believe this is a Phantom-specific issue at this time. ” Some users initially suspected the hack could be related to transactions on Magic Eden’s Solana-based non-fungible token (NFT) marketplace, though the source of the exploit has yet to be confirmed. Magic Eden did not respond to CoinDesk’s request for comment, but tweeted a warning for users to revoke permissions from its wallet to avoid being attacked.
Twitter is flooded with reports of Solana users noticing that tokens have suddenly been drained from their accounts. “I was getting my sunglasses refit when I got a push notification from my mobile wallet that I had sent all the SOL from my wallet,” Solana community member @gostak_gm told CoinDesk. “It was my main hot wallet, so I had it connected to lots of different mobile and web extension wallet providers as well as a lot of dapps.
Not clear to me what could have been the root cause. Glad to have most of my funds on a cold wallet. ” It is unclear at this point whether the vulnerability is limited only to the Solana blockchain.
A Trust Wallet and Slope wallet user reported losing USDC on both Solana and Ethereum. UPDATE (Aug. 3, 2022, 00:41 UTC): Adds additional information.
UPDATE (Aug. 3, 2022, 01:30 UTC): Adds additional information. DISCLOSURE Please note that our privacy policy , terms of use , cookies , and do not sell my personal information has been updated.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies . CoinDesk is an independent operating subsidiary of Digital Currency Group , which invests in cryptocurrencies and blockchain startups . As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights , which vest over a multi-year period.
CoinDesk journalists are not allowed to purchase stock outright in DCG. Eli Tan Eli is a news reporter for CoinDesk. He holds ETH, SOL and AVAX.
Follow @ elitanjourno on Twitter Sam Kessler Sam is a reporter at CoinDesk focused on decentralized technology, DeFi and DAOs. He owns ETH, BTC and MATIC. Follow @ skesslr on Twitter Eli Tan Eli is a news reporter for CoinDesk.
He holds ETH, SOL and AVAX. Follow @ elitanjourno on Twitter Sam Kessler Sam is a reporter at CoinDesk focused on decentralized technology, DeFi and DAOs. He owns ETH, BTC and MATIC.
Follow @ skesslr on Twitter.
From: coindesk
URL: https://www.coindesk.com/markets/2022/08/03/phantom-wallet-exploit-drains-millions-in-sol-tokens/?utm_medium=referral&utm_source=rss&utm_campaign=headlines