Market
First wallet provider to report impact from Solana Web3.js vulnerability by January 2025?
3
Resolution / Starting Odds
Phantom • 25%
Solflare • 25%
Brave Wallet • 25%
None • 25%
Official statements from wallet providers or security reports
Story
Solana Web3.js Library Compromised in Supply Chain Attack, Versions 1.95.6 and 1.95.7 Expose Private Keys; Upgrade to 1.95.8
Dec 3, 2024, 10:43 PM
A significant security vulnerability has been identified in the Solana Web3.js library, specifically in versions 1.95.6 and 1.95.7. This vulnerability, described as a supply chain attack, allows malicious code to steal private keys from users and developers, potentially enabling attackers to drain crypto wallets. The compromised library is widely used in Solana decentralized applications (dApps). Users are advised to upgrade to version 1.95.8, which is unaffected by the issue. Several wallet providers, including Phantom, Solflare, and Brave Wallet, have confirmed that they are not impacted by this vulnerability, as they do not utilize the compromised versions of the library. The incident underscores the importance of security in the Web3 ecosystem, with various security teams actively monitoring the situation and providing guidance on how to check for potential impacts.
View original story
Similar markets
No • 50%
Yes • 50%
Other • 25%
Coinbase Wallet • 25%
Trust Wallet • 25%
Ledger Live • 25%
Less than $1 million • 25%
More than $10 million • 25%
$1 million to $5 million • 25%
$5 million to $10 million • 25%
Other • 25%
Ethereum • 25%
Bitcoin • 25%
Dogecoin • 25%
USDT (Tether) • 25%
Bitcoin • 25%
Ethereum • 25%
Other • 25%
Third-party security firm • 25%
Other • 25%
Google • 25%
Government agency • 25%
Bitcoin • 25%
Other platforms • 25%
Binance Smart Chain • 25%
Ethereum • 25%
Yes • 50%
No • 50%
SolarWinds • 25%
Microsoft • 25%
Other • 25%
Cisco • 25%