The malicious Google Chrome extension "Crypto Copilot" steals Solana exchange funds by hiding additional transfers.

SOL0,65%
RAY-0,03%

PANews reported on November 28 that cybersecurity company Socket disclosed in a report released on Tuesday that a malicious Google Chrome extension named Crypto Copilot allows users to trade on the Solana blockchain through posts on social media platform X, while secretly siphoning fees from each trade exchange into the creator's wallet. The extension executes exchange operations for users using the decentralized exchange Raydium, while appending a hidden transfer instruction that moves Solana coins from the user's account to the attacker's account. Unlike typical malware that attempts to steal the entire wallet balance, this extension siphons at least 0.0013 Solana coins (about 0.05% of the transaction amount) from each trade. The user interface only displays transaction exchange details, while the wallet confirmation interface summarizes the transaction without showing specific instructions, leading users to believe they are only signing a transaction exchange, when in fact they are simultaneously authorizing both the exchange and the fund transfer. Although the extension has only accumulated 15 users since its release on June 18, 2024, it still exposes the security risks present in the browser extension ecosystem.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Solana and XRP Dominate DeFi Social Engagement As Network Activity Surges

Community engagement and social sentiment continue to play a role in shaping the future of Decentralized Finance, resulting in a continued increase in both market liquidity and developer interest. Market analytics from recently published data indicate that a large percentage of overall social

BlockChainReporter15m ago

DeepSeek AI Predicts the Price of Solana and XRP If the War Ends

In the last two weeks, the tension between the US and Iran has been a cause of concern for the markets. Threats and military postures from both sides have left investors taking cover. Oil prices have shot up as investors are worried about the supply of crude, and traditional safe havens like

CaptainAltcoin8h ago

Solana Approaches Key Sell Wall at $84.78 — Will Momentum Hold for a Move Toward $89?

Solana is trading at an approximate price of $83.18, although a solid sell wall is at an approximate price of $84.78, which prevents upward movement. The price is trapped between the support at $81.99 and the resistance at $84.78 which is short term consolidation. Once buyers hit the

CryptoNewsLand8h ago

The USDC Treasury has minted a total of 500 million USDC twice on the Solana chain.

Gate News Report, on March 10, at 23:36 and 23:41 Beijing time, according to Whale Alert monitoring, USDC issuer USDC Treasury minted an additional 250 million USDC on the Solana chain, totaling 500 million USDC minted in two transactions (worth approximately $500 million).

GateNews10h ago
Comment
0/400
No comments