Thousands of “hot” wallets connected to the internet have been the target of hackers who have stolen millions worth of cryptocurrency from the Solana ecosystem. Even while such attacks are typical among blockchain platforms, the story is still noteworthy given the accolades Solana has received for being one of the more efficient and affordable ecosystems for trading digital assets.
Both Solana’s own cryptocurrency (SOL) and others that are compatible with the Solana blockchain, such as the stablecoin USD Coin, appear to have been stolen by hackers (USDC). For now, the value of the assets taken is unknown yet because the attack is still going on, however, estimates from unbiased analysts and security companies like PeckShield have put the losses as high as $8 million.
In the past, Solana has suffered a number of security issues, such as bot spam and DDoS attempts that have been documented. It is also accepting reservations for the Saga phone, which it claims will go on sale next year and will include built-in support for the network’s decentralized apps.
According to Solana’s official Twitter account, the hack appears to have compromised about 8,000 wallets (up from 7,767 previously), including those run by Phantom and Slope. While noting that there was no proof that hardware wallets, or those not linked to the internet, had been impacted, the business did not specify the cause of the attack.
“This does not appear to be an issue with Solana core code, but in software utilized by numerous software wallets popular among users of the network,” the company’s status update reads in a tweet.
Anatoly Yakovenko, Solana’s co-founder, provided additional information about the breach on Twitter, saying it appeared to be a supply chain attack that targeted both iOS and Android applications (meaning that the attackers exploited some weakness in connected apps or browser extensions). According to Decrypt, the transactions are signed using the users’ private keys, which indicates that the attackers may have compromised the seed phrase used to protect the individuals’ wallets.
Olagoke Ajibola is a creative writer and content producer with an eye for details and excellence. He has a demonstrated history of telling stories for TV, Film and Online. Aside from being fascinated by the power of imagination, his other interest are travel, sport, reading and meeting people.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
