Security reports and news articles identifying similar attacks

Solana Web3.js Library Compromised in Supply Chain Attack, Versions 1.95.6 and 1.95.7 Expose Private Keys; Upgrade to 1.95.8

Dec 3, 2024, 10:43 PM

A significant security vulnerability has been identified in the Solana Web3.js library, specifically in versions 1.95.6 and 1.95.7. This vulnerability, described as a supply chain attack, allows malicious code to steal private keys from users and developers, potentially enabling attackers to drain crypto wallets. The compromised library is widely used in Solana decentralized applications (dApps). Users are advised to upgrade to version 1.95.8, which is unaffected by the issue. Several wallet providers, including Phantom, Solflare, and Brave Wallet, have confirmed that they are not impacted by this vulnerability, as they do not utilize the compromised versions of the library. The incident underscores the importance of security in the Web3 ecosystem, with various security teams actively monitoring the situation and providing guidance on how to check for potential impacts.