Market
Most effective entity in providing guidance for Solana Web3.js vulnerability by March 2025?
2
Resolution / Starting Odds
Solana Foundation • 25%
Independent security firms • 25%
Wallet providers • 25%
Open-source community • 25%
Industry reports, user feedback, and official acknowledgments
Story
Solana Web3.js Library Compromised in Supply Chain Attack, Versions 1.95.6 and 1.95.7 Expose Private Keys; Upgrade to 1.95.8
Dec 3, 2024, 10:43 PM
A significant security vulnerability has been identified in the Solana Web3.js library, specifically in versions 1.95.6 and 1.95.7. This vulnerability, described as a supply chain attack, allows malicious code to steal private keys from users and developers, potentially enabling attackers to drain crypto wallets. The compromised library is widely used in Solana decentralized applications (dApps). Users are advised to upgrade to version 1.95.8, which is unaffected by the issue. Several wallet providers, including Phantom, Solflare, and Brave Wallet, have confirmed that they are not impacted by this vulnerability, as they do not utilize the compromised versions of the library. The incident underscores the importance of security in the Web3 ecosystem, with various security teams actively monitoring the situation and providing guidance on how to check for potential impacts.
View original story
Similar markets
Yes • 50%
No • 50%
75% to 90% • 25%
More than 90% • 25%
50% to 75% • 25%
Less than 50% • 25%
Less than $1 million • 25%
More than $10 million • 25%
$1 million to $5 million • 25%
$5 million to $10 million • 25%
Dogecoin • 25%
Bitcoin • 25%
Other • 25%
Ethereum • 25%
Google • 25%
Other • 25%
Third-party security firm • 25%
Government agency • 25%
Yes • 50%
No • 50%
Lack of awareness • 25%
Perceived lack of need • 25%
Complexity • 25%
Cost • 25%
Microsoft • 25%
Other • 25%
Cisco • 25%
SolarWinds • 25%