Solana exploit related to imported Slope Finance wallets, private keys revealed


As initially reported by CryptoSlate early hours of Wednesday morning, a significant exploit has caused thousands of crypto wallets to be drained of funds. The initial report was released as the incident was ongoing; however, a follow-up article revealed more information regarding the connection to Slope FInance.

Information is finally coming to light as to the origin of the exploit. Slope issued a statement on Wednesday evening advising all wallet owners to move any funds in wallets imported into Slope. The warning expanded on the advice to state that it does “not recommend using the same seed phrase on this new wallet that you had on Slope.”

How To Get Free Crypto  

Phantom, another Solana wallet that many users were using when funds were drained, made a statement identifying “complications related to importing accounts to and from Slope Finance.”

The Solana Status Twitter account, run by the Solana Foundation, also issued a statement confirming the relationship to the Slope mobile wallet.

In the Twitter thread, the Solana Foundation revealed that “private key information was inadvertently transmitted to an application monitoring service.”

The silver lining in a tragic tale is that the issue does not appear to be a blockchain or seed generation issue. A flaw in the Solana blockchain’s cryptographic proofs could have devastating effects on the entire crypto ecosystem. However, this no longer seems to be on the cards, and the Solana Foundation affirmed that “there is no evidence the Solana protocol or its cryptography was compromised.”

Coinbase Banner  

In a screenshot of logs from Moon Rank NFT, Foobar highlighted the possible inclusion of private keys and mnemonic phrases within a Slope API call. While the POST request appears to have been sent over SSL encryption, the fact that a seed phrase is included is troubling. A possible cause would have been a man-in-the-middle attack where a malicious actor can listen to communications between two parties to steal sensitive information.

Somewhat worryingly, users still declare that they “never used Slope in [their] life,” yet their wallets were still drained. Users have also reported Trust Wallet accounts being drained of funds, but these accounts are limited.

The total value lost from the exploit is as yet unknown, but figures as high as $580M have been reported as the wallet ” has been flagged on SolScan as being involved in the exploit with a balance of $570M. However, most of these funds are from the EXIST token, which is not tracked on either CoinMarketCap or CoinGecko, so the liquid amount exploited is more likely less than $10 million.

Binance founder and CEO, CZ, has also now recommended all users who have used wallets on Slope Finance move funds to a fresh wallet or to Binance if you do not understand the words “private key or seed phrase.”

FreeBitcoin Banner  

Go to Source
Author: Liam ‘Akiba’ Wright

Recommended Crypto Services, Products and Strategies:

The first thing any crypto investor needs is is a reliable and secure Crypto Wallet.  Whether you’re looking for an online wallet, hardware wallet, desktop or mobile wallet, Crypto Renegade provides you with all the Best Crypto Wallets in each category.

Best Crypto Wallets Banner

When you’re ready to buy more crypto, or exchange your coins for others, Crypto Renegade’s list of the Best Crypto Exchanges has you covered.  The Crypto Exchanges recommended here offer everything from simplicity and convenience to advanced trading platforms and profit sharing. 

Best Crypto Exchanges Banner

If you want to learn more about the methods and tools that can be used to find Great Crypto Projects, then be sure to check out Crypto Renegade’s strategy for How To Find The Best Cryptocurrency.

Crypto Strategy Banner

For those people that don’t have any money to invest right now, or just want to understand the technology a bit more, you’ll definitely want to check out Crypto Renegade’s Free Crypto Strategy and start collecting Free Coins today!

Free Crypto Banner

What do you think about cryptocurrency? Do you have any questions about it? Be sure to leave a comment below.

This site uses Akismet to reduce spam. Learn how your comment data is processed.