Almost 8,000 Solana Wallets Drained in Suspected “Supply Chain” Exploit

No less than 7,767 Solana wallets have been affected. 

Hackers Goal Solana Customers 

Hackers have drained 1000’s of Solana wallets in an ongoing assault. 

Engineers from a number of ecosystems, with the assistance of a number of safety companies, are investigating drained wallets on Solana. There is no such thing as a proof {hardware} wallets are impacted.

This thread shall be up to date as new info turns into out there.

— Solana Standing (@SolanaStatus) August 3, 2022

Reviews that attackers had been siphoning funds from the Layer 1 blockchain’s pockets customers surfaced on Twitter early Wednesday. Although the total scale of the harm is unknown, the Solana Basis has confirmed that a minimum of 7,767 wallets have been impacted at press time. 

The Solana Basis took to Twitter to verify it was investigating the incident at 02:39 UTC. “Engineers from a number of ecosystems, with the assistance of a number of safety companies, are investigating drained wallets on Solana. There is no such thing as a proof {hardware} wallets are impacted.” 

The hackers focused each Phantom and Slope pockets customers. Each groups issued statements to verify that they had been investigating the incident, with Phantom noting that “the workforce doesn’t consider this can be a Phantom-specific situation.” Magic Eden additionally mentioned that it was trying into “a widespread SOL exploit” and urged Solana customers to revoke their pockets permissions for any suspicious hyperlinks. 

The Solana Basis famous that {hardware} wallets seem like unaffected. Primarily based on the knowledge at present out there, Solana Labs communications lead Austin Federa mentioned that “a possible provide chain assault” could possibly be guilty. He speculated that a number of wallets might share some software program dependency because the attackers had been capable of signal the transactions that drained the wallets with out tricking customers into making a gift of their funds, as is usually the case with different crypto pockets exploits. “It’s seemingly not protocol stage,” he added. Some Ethereum TrustWallet customers have reportedly been affected, although it’s nonetheless unclear whether or not they had been focused as a part of the identical breach. 

Solana Labs co-founder and CEO Anatoly Yakovenko additionally commented on the incident, calling for affected customers to come back ahead with info. “in search of of us who had been effected by the assault, however solely obtained sol or tokens into the pockets and by no means transacted greater than as soon as, by no means reused their mnemonic key wherever else,” he wrote. The Solana Basis has additionally requested affected customers to fill out a survey to assist engineers investigating the incident discover the foundation trigger. 

The full sum stolen remains to be unknown, although it’s believed to be within the thousands and thousands of {dollars}.

SOL has suffered within the fallout from the assault. Per CoinGecko information, it’s buying and selling at $38.55, down 4.4% at press time. 

This story is growing and shall be up to date as additional particulars emerge. 

Disclosure: On the time of writing, the writer of this piece owned ETH and a number of other different cryptocurrencies.