Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors

Ongoing Multimillion Dollar Hack Targets Solana Wallets

Solana hack

A security vulnerability impacting the Solana ecosystem has reportedly seen at least $6 million in SOL, SPL and other tokens drained across wallets. The attack is still ongoing. 

The vulnerability was first reported by Twitter user Solport Tom.

Four Solana addresses are suspected to be linked to the attack. Crypto tracking and compliance platform, Mist Track, estimated that as much as $580 million worth of cryptocurrency had been stolen from 8,000 wallets and then dispersed among four separate wallet addresses. However, their is widespread scepticism in crypto commmunity regarding this number.

Scam Detective ZachXBT revealed that the hackers initially funded the wallet via Binance seven months ago. The wallet remained dormant until the hackers conducted transactions with four wallets right before the attack started.

NFT marketplace Magic Eden tweeted to confirm reports of a “widespread SOL exploit at play” warning users to revoke permission for any suspicious links in their Phantom wallets to avoid being hacked.

While Phantom tweeted that it was “working with other teams to get to the bottom of the issue”, they did not believe that it was a Phantom-specific issue.

Slope released a similar statement stating that the team was actively working to address the issue.

Nevertheless, it is unclear at this point whether the vulnerability is only limited to the Solana Blockchain. 

Crypto Twitter user and crypto developer foobar reported that both Phantom and Slope wallets that have been inactive for >6 months were being affected. Crypto auitor OtterSec tweeted “these transactions are being signed by the actual users, suggesting some sort of private key compromise.”

It is suspected by some users that the hack could be related to transactions on Magic Eden’s Solana-based NFT marketplace.

Solana’s value has seen a drop of 8% in the first two hours following the first reports of the exploit. The Solana team has yet to issue an update on social media.

Share Post: