- Phantom wallet users are complaining about draining money without their consent
- Several commentators point to an exploit related to the wallet or NFT Magic Eden market
Users of Solana digital wallets Phantom and Slope claim that millions were stolen from an unknown exploit linked to the trusted wallets or apps associated with them.
according to multiple users and market participants, exploitation on Solana network or via native wallets drains users’ money even though web browsers are disconnected or any transfers are made. The exact details of the exploitation are not yet known.
“We are working closely with other teams to get to the bottom of the reported vulnerability in the Solana ecosystem,” the Phantom team told Blockworks. “Currently, the team does not believe this is a Phantom-specific problem.” The exact amount stolen from users’ wallets is not yet known.
Users said they were getting notifications that they were sending codes to an unknown set of addresses. The total amount of funds drained so far is suspected to be more than $6 million in SOL from more than 7,760 wallets. Blockworks was not able to independently verify the total amount taken.
Users of online cryptocurrency wallet Mile They also report incidents of exploitation. The attacker allegedly stole tokens for both SOL and Solana Program Library (SPL).
One user, addressing Paladin on Twitter, told Blockworks that several people familiar with the situation had randomly drained their wallets.
They said, “They lost thousands and most of their money, so they are very disappointed.” “Move the coins to the ledger and disconnect every trusted website.”
Paladin pointed out two big wallet addresses He is suspected of belonging to a scalper who has a total balance of around 37,777 Sol (US$1.5 million). a The third walletwith about 2,402 SOL ($95,000) continuing to see funds drain their address as a result of exploitation, Paladin said.
The exploit appears to affect all Solana-based tokens, with recommendations to move coins to the ledger, cancel trusted apps like NFT marketplace Magic Eden or lock them with staking.
Hacks and exploits related to DeFi and NFTs continue to increase. Last month, Blockworks reported that the number of hacks reached more than $1.2 billion For the first quarter of this year alone, what appears to be an increase in hesitation for the emerging sector.
Persistent hacks “are basically an unsolvable problem,” Immunefi CEO Mitchell Amador told Blockworks in an interview at the time. We knew things would go in that direction. Volatility is a part of cryptocurrency, and the amount of money flowing in has been increasing. “
Update: Changes the address and transcript to reflect Slope Wallet users also affected by the exploit. Response updates from the Phantom team.
Get the best cryptocurrency news and insights of the day right in your inbox every evening. Subscribe to the free newsletter from Blockworks Currently.
“Organizer. Pop culture aficionado. Avid zombie scholar. Travel expert. Freelance web guru.”