Security News > 2022 > August > Solana, Phantom blame Slope after millions in crypto-coins stolen from 8,000 wallets

From what we can tell, and details are still light, somewhere between $4.5 million and $8 million in coins - including stablecoins USDC and USDT, and Solana's SOL - were taken from roughly 8,000 Slope and Phantom mobile app wallets.

Phantom also makes a Solana-focused mobile wallet for Android and iOS. Coins were drained from some of its users' mobile wallets, though the majority of stolen funds were pulled from Slope wallets.

Phantom pointed the finger of blame toward Slope, suggesting a flaw in its technology or processes allowed some Phantom wallets to be emptied.

The Solana Foundation, which steers the development of the cryptocurrency, on Wednesday said that "After an investigation by developers, ecosystem teams, and security auditors, it appears affected addresses were at one point created, imported, or used in Slope mobile wallet applications."

Essentially, the foundation is saying that somehow the private keys of people's Slope wallets, and wallets handled by Slope at some point, leaked out into the wild, and these were seized and used by crooks to hijack those funds and transfer it all away.

Slope issued a statement, confirming "a cohort of Slope wallets were compromised."

News URL

https://go.theregister.com/feed/www.theregister.com/2022/08/04/solana_wallet_slope/