{"id":13486,"date":"2022-08-10T09:54:54","date_gmt":"2022-08-10T09:54:54","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/web3-wallet-provider-slope-linked-to-solana-attack\/"},"modified":"2022-08-10T09:54:54","modified_gmt":"2022-08-10T09:54:54","slug":"web3-wallet-provider-slope-linked-to-solana-attack","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/web3-wallet-provider-slope-linked-to-solana-attack\/","title":{"rendered":"Web3 wallet provider Slope linked to Solana attack"},"content":{"rendered":"

(Originally posted on : CoinJournal: Latest Bitcoin, Ethereum & Crypto News )<\/b>
\n<\/p>\n

\n

After the Solana attack that started on August 2, details have emerged linking a third-party Web3 wallet provider Slope to the attack.<\/p>\n

More than 8,000 Solana hot wallets were attacked and approximately $8 million worth of crypto assets were stolen. At the onset of the attack, Solana advised its users to switch to hardware wallets although it was too late since users had already lost funds.<\/p>\n

Today, Solana has updated its community via Twitter<\/a> after discovering that the affected addresses were part of Slope Wallet, which is a Web3 wallet.<\/p>\n

The tweet by Solana stated:<\/p>\n

\u201cAfter an investigation by developers, ecosystem teams, and security auditors, it appears affected addresses were at one point created, imported, or used in Slope mobile wallet applications.\u201d<\/em><\/p>\n

slope has a web-based crypto wallet, a mobile app, and a browser extension. It is integrated with Solana Pay and it allows users to send and receive tokens on the Solana network.<\/p>\n

What we know about the Solana attack so far<\/h2>\n

Solana has stated that the details of what really transpired are still unclear although there is evidence that \u201cSlope wallet was logging or transmitting user mnemonics and private keys.\u201d\u00a0<\/p>\n

\n

While not certain that this is the exploit, it appears to now be confirmed that Slope wallet was logging or transmitting user mnemonics and private keys. See screenshot in this tweet showing private key and mnemonic in what appears to be a network request https:\/\/t.co\/oBkfrHP9I7<\/a><\/p>\n

\u2014 Laine \u2764\ufe0f stakewiz.com (@laine_sa_) August 3, 2022<\/a><\/p>\n<\/blockquote>\n

Nevertheless, Solana has said that there is no evidence that the Solana Protocol or its cryptography was compromised during the attack.<\/p>\n

After the revelation of Slope\u2019s link to the attack, Solana co-founder, Anatoly Yakovenko tweeted advising Slope users to generate their seed phrase in a different wallet as soon as possible. Binance CEO, Changpeng Zhao, echoed Anatoly\u2019s advice adding that users could use Binance.<\/p>\n

\n

If you used a Slope wallet (for SOL) in the past, move your funds to a different wallet ASAP. Do not “import” the old wallet. Use a new private key or seed phrase. If you don’t know those words mean, send your SOL to @binance<\/a>. The easy way. https:\/\/t.co\/t1lYcgaX5z<\/a><\/p>\n

\u2014 CZ \ud83d\udd36 Binance (@cz_binance) August 3, 2022<\/a><\/p>\n<\/blockquote>\n

On its part, Slope issued a letter\u00a0<\/a>explaining to its customers the hypothesis of the attack and stating that it could not confirm anything yet. In the letter, Slope notes:<\/p>\n

\u201cWe feel the community\u2019s pain, and we were not immune. Many of our own staff and founders\u2019 wallets were drained.\u201d<\/em><\/p>\n

Details of what really happened are still trickling in as Solana and Slope Wallet users are advised to take caution.<\/p>\n

The price of SOL, the native token of the Solana network has taken a hit and has dipped by over 10% over the last two days. At the time of writing, Solana was trading at $38.86.<\/p>\n<\/div>\n