Blockchain audit security team OtterSec tweeted that more than 5,000 Solana wallet funds had been stolen in the past few hours, and OtterSec analysis showed that these transactions were signed by the actual owners, indicating a private key leak. The vulnerability could also affect ETH users.
Furthermore, crypto KOL foobar said wallets that were inactive for more than 6 months were the hardest hit, with both Phantom and Slope wallets experiencing fund theft issues. The reason for the exploit is unknown, it may be an upstream-dependent supply chain attack, and revoking approval may not help, the solution is to move the assets to a wallet that never exposes the private key to a potentially vulnerable browser extension, a hardware wallet.
