Loading...
Market
What will be the adoption rate of Solana Web3.js version 1.95.8+ by March 31, 2025?
2
Resolution / Starting Odds
Less than 50% • 25%
50% to 75% • 25%
75% to 90% • 25%
More than 90% • 25%
Surveys or reports from Solana developer community or GitHub statistics
Story
Solana Web3.js Library Versions 1.95.6, 1.95.7 Compromised in Supply Chain Attack
Dec 3, 2024, 10:38 PM
A critical security breach has been identified in the popular Solana JavaScript library, @solana/web3.js, used for connecting Solana-related technologies to blockchain nodes. Versions 1.95.6 and 1.95.7 of the library were compromised through a supply chain attack, injecting malicious code, referred to as a secret stealer, that leaks private keys to a remote server, enabling attackers to drain cryptocurrency wallets. Developers and users relying on these versions are advised to upgrade to version 1.95.8 immediately, as version 1.95.5 remains unaffected. Security organizations, including @_SEAL_Org, flagged the issue promptly, and guidance on identifying potential impacts has been shared by the crypto security community. Services capable of blacklisting affected addresses have been urged to act. The incident underscores the risks associated with supply chain vulnerabilities in widely used software libraries.
View original story
Similar markets
10% to 25% • 25%
Less than 10% • 25%
More than 50% • 25%
25% to 50% • 25%
Rank 4 to 6 • 25%
Top 3 • 25%
Outside top 10 • 25%
Rank 7 to 10 • 25%
Cease use of the library • 25%
Upgrade to version 1.95.8 • 25%
Switch to a different library • 25%
Implement additional security checks • 25%
Less than 25% • 25%
25% to 50% • 25%
50% to 75% • 25%
More than 75% • 25%
Independent security firms • 25%
Solana Foundation • 25%
Wallet providers • 25%
Open-source community • 25%
Yes • 50%
No • 50%
CAD $50 million to CAD $60 million • 25%
CAD $40 million to CAD $50 million • 25%
Less than CAD $40 million • 25%
More than CAD $60 million • 25%