La billetera fantasma está a salvo del ataque a la cadena de suministro Solana
La billetera fantasma es segura, a pesar de las especulaciones de que pudo haber sido comprometida como parte de un ataque a la cadena de suministro Solana . Los usuarios Solana quedaron expuestos después de que se inyectara código malicioso en una biblioteca Web3 JS para Solana .
Phantom Wallet anunció que no se vio afectada por el ataque a la cadena de suministro Solana , que fue descubierto en una de las bibliotecas Web3 de código abierto. La billetera no informó ningún exploit por su parte, aunque un número desconocido de usuarios pueden haber sido afectados. La billetera en sí no utiliza ninguna de las versiones comprometidas.
Phantom no se ve afectado por esta vulnerabilidad.
Nuestro equipo de seguridad confirma que nunca hemos utilizado las versiones explotadas de solana /web3.js https://t.co/9wHZ4cnwa1
- Fantasma (@phantom) 3 de diciembre de 2024
Solana builders and users may have been exposed to two malicious versions of web3.js, 1.95.6 and 1.96.7. The earlier version is safe, as well as an upgrade to version 1.95.8.
The attack was noticed on December 2 and it affected apps, bots, and custodial services. The widely used library contained code that requested and broadcast private keys, thus compromising user wallets.
Based on the records of the Anza development firm, the account was exposed for around 5 hours on December 2, which limited the number of potential downloads during that time window.
The suspected versions were immediately unpublished, but apps and projects may have their multisig or other credentials exposed.
For now, there is no data about any major Solana apps or accounts changing their wallets or storage. The last transaction to the exploiter wallet was from December 3, further suggesting the exploit affected a limited number of users.
In the meantime, one of the identified wallets is moving funds to a new account with a high balance of SOL and other assets, including Jupiter (JUP). The new account has been identified as a high-balance wallet by Nansen. None of the proceeds from the hack have been traded or disguised, as with other hacks.
Limited gains from Solana wallets drained in exploit
While far-reaching, the attack did not seem to affect high-value wallets. The identified exploiter wallet withdrew around $160K in SOL and nine tokens valued at $31,300. The attacker ended up testing wallets with billions of transaction requests, suggesting there may be many more unknown affected wallets.
One of the reasons for the limited exploit haul is that the Solana network still has more than 35% failure rate for its transactions. However, the attempts suggest the exploiter may have gained more private keys through exposed apps.
The attack happened through a social engineering attack, which allowed the malicious actors to gain access to the web3.js library depository. Reportedly, the project’s builders received a phishing link where the attackers requested and gained access. The malicious dataset has been flagged and is available for researchers through GitHub.
Supply chain attacks emerged in the past year, with Lottie player also used as a vector to gain access to wallets. However, a direct targeting of private keys is a more rare type of attack. In the case of Solana apps, the exploiter managed to obtain private keys since some apps also required the same information for legitimate purposes.
While most Solana apps have proven safe, the recent influx of new retail users is exposing some of the potential vulnerabilities.
Responsibility for code dependencies and usage lies with projects. With fast building, the web3.js library has been downloaded more than 350K to 400K times in a week, leading to wider potential exposure.
Solana wallet attacks are a key risk
Solana drainers are becoming more active, and one of the few things that prevents bigger exploits is the fact that most wallets still contain under 1 SOL.
One of the risks is that once exposed to a drainer, a Solana wallet is always at risk. Solana wallets also cannot revoke their permissions as in Ethereum.
The Solana network is still not as heavily exploited as Ethereum, but has a prevalence of attacks against personal wallets. One of the vectors include Telegram, which can be connected to a Solana wallet for bot usage or easier trading.
Using the same Telegram credentials also means that the wallet may be exposed and drained by malicious apps. The best approach is to use a dedicated wallet for storage, and another one for Web3 tasks.
Land a High-Paying Web3 Job in 90 Days: The Ultimate Roadmap
Artículos Relacionados
Avance de la temporada de resultados del 2T 2025: La primera prueba bajo los aranceles de Trump - ¿Podrían las bajas expectativas traer sorpresas?
Mediados de julio marcará la primera temporada de ganancias desde que la política arancelaria del presidente Donald Trump entró en vigor, ofreciendo a los inversores una visión de cómo las empresas estadounidenses están manejando el impacto de las tensiones comerciales.
La cartera 2025 de Warren Buffett: Un gigante defensivo que equilibra las apuestas heredadas con la disciplina estratégica
A 31 de marzo de 2025, Berkshire Hathaway de Warren Buffett mantiene una cartera de acciones de 258.700 millones de dólares repartida en 36 valores.
La inversión de Meta en IA a gran escala: un ambicioso paso hacia el dominio de la IA
Una de las operaciones más destacadas de los últimos meses es la inversión de Meta de 14.300 millones de dólares en Scale AI, una startup de IA en crecimiento con potencial para convertirse en un actor destacado en todo el ecosistema de IA en los próximos años.
¿Cuál es el futuro de las stablecoins? Algunos valores de Stablecoin a tener en cuenta
La reciente evolución legislativa en Estados Unidos y Hong Kong ha puesto a las stablecoins en el punto de mira financiero.
La disputa entre Trump y Musk desploma las acciones de Tesla y los cortos se embolsan 4.000 millones - Vuelven los alcistas al relajarse las tensiones
Una disputa pública entre el presidente de Estados Unidos, Donald Trump, y el consejero delegado de Tesla, Elon Musk, hizo que las acciones del gigante de los vehículos eléctricos se desplomaran casi un 14% el jueves, marcando una de las mayores caídas en un solo día de su historia.
