Solana-based wallets lost $8M: Vulnerability & Hacking

On Aug 3, 2022

Many Solana-based users claimed that their funds are getting lost themselves because of possible hacking attacks in the wallet.

Phantom and Slope wallets are popular hot wallets, based on the solana blockchain. Many users tweeted about the issues associated with their funds lost. The majority of the people claimed that their funds are disappearing from their wallets without their permission or any kind of activity.

A Twitter user said that he lost around $ 6 million worth of funds within 10 minutes of the time frame. That user shared a screenshot of the whole activities that took place in his wallet.

some exploit either with @phantom or @MagicEden, drained 6mil in like 10 mins literally every phantom wallet getting compromised, not sure if any other wallets too pic.twitter.com/dVtksoMeye
— Paladin (@nftpeasant) August 2, 2022

On 3 August, crypto analytic firm PeckShield did the analysis and said that hackers stole the private keys of users from the affected wallets. And also hackers secured around $8 million through this attack and a coin almost collapsed with the loss of $570 value.

#PeckShieldAlert The widespread hack on Solana wallets is likely due to the supply chain issue exploited to steal/uncover user private keys behind affects wallets. So far, the loss is estimated to be $8M, excluding one illiquid shitcoin (only has 30 holds & maybe misvalued $570M) pic.twitter.com/aTGNsTc6d8
— PeckShieldAlert (@PeckShieldAlert) August 3, 2022

Ripple CEO warns US government’s next target “top…

May 12, 2024

Bearish sentiments around the $Eclip crypto token…

May 10, 2024

Cardano founder introduces CIP-69 into the upcoming…

May 10, 2024

The phantom wallet team responded to these things and claimed that the issue is not associated with the wallet, instead it may be because of a vulnerability associated with the Solana ecosystem.

We are working closely with other teams to get to the bottom of a reported vulnerability in the Solana ecosystem. At this time, the team does not believe this is a Phantom-specific issue.

As soon as we gather more information, we will issue an update.
— Phantom (@phantom) August 3, 2022

The project team of Slope wallet also responded and said that they are working with Solana Labs to find out the main issue.

“We’re currently working with Solana Labs and other Solana-based protocols and teams to pinpoint the issue and rectify it. Will update again within 30 minutes.”

At this time, the Slope team confirmed that they haven’t yet reached any conclusion to find out the real problem behind this issue, so investigations are going on.

Still war-rooming through it. No major breakthroughs yet. Will follow up as soon as possible with any major conclusions and/or recommended practices.
— Slope (@slope_finance) August 3, 2022

Read also: Gucci now accepts NFT coin “Ape”