Update on the SOL Exploit

A month to the day from the Crema Finance exploit, a Solana lending & borrowing platform that was hacked for almost $9M, another exploit began yesterday effecting over 9,000 wallets and counting. Users reporting funds being drained from major, mobile, browser extension hot wallets such as Phantom, Slope, and TrustWallet.

Twitter

If you are just now discovering this and are worried about your funds best practice for self-defense to is to move funds asap if you have any funds on your Phantom, Slope, or TrustWallet. Preferably into a hardware wallet that has never interacted with anything and is your “cold storage”.

Twitter

The exploiters are actively stealing both SOL and SPL (USDC), as well as other Solana based tokens. Up to $5M and counting has been robbed as of this writing (updated 9pm Aug 3).

  • Primarily to these Wallet addresses: Htp9MGP8Tig923ZFY7Qf2zzbMUmYneFRAhSp7vSg4wxV CEzN7mqP9xoxn2HdyW6fjEJ73t7qaX9Rp2zyS6hb3iEu

You can follow those addresses on SolScan here

There is a good understanding for the cause of the exploit that came out today, and it is much worse than anyone would’ve guessed. The attacker was able to initiate and approve transactions out of user hot wallets because the seed phrases of the users were stored in Slope’s centralized servers and were compromised, MITM attack (Man-In-The-Middle). @0xfoobar covered this in detail today.

Twitter

The Slope official Statement is summed up as the investigation is still continuing and they’re working with developers and security experts to rectify the situation. They have advised all slope users to transfer assets out of Slope wallets and into a new wallet with a unique seed phrase. Again, best to use a hardware wallet.

Slope

The Solana official statement states that there isn’t any evidence the Solana protocol or it’s cryptography was compromised in any way. Expect more official statements once they can confirm more throughout the investigation.

Twitter

Solana attracted a lot of users over the high levels of throughput, low fees, and high scalability. SOL price experienced massive levels of growth last year topping out at nearly $260 SOL with many referring to it as the “ETH killer.” Still, it’s centralization and functionality remain a big problem. Such as the notable 16 hour outage on Sep 15, 2021.

Will keep updated as more information comes out. If you think your funds are at risk move them quick!

Photo of author

Written By BowTied Scholar

Scholar helps people learn more about Crypto and CBDCs. Hope to see you on Degen Island!

Disclosure

This article may contain links to third-party websites or other content for information purposes. BowTiedIsland may receive a commission at no cost to you if you purchase a product after clicking one of these links. The Third-Party Sites are not under the control of BowTiedIsland, and BowTiedIsland is not responsible for the content of any Third-Party Site. All information contained herein is the opinion of the writer and does not constitute financial advice. We aim to act as a neutral third party and aid in your research and analysis.


The Jungle


Crypto, Investing, and E-Commerce with BowTied Bull

The future is internet based, therefore we have a triangle based approach with crypto, e-commerce business making and Investing in traditional assets

The Culture War with BowTiedRanger

Whether you’re a political junkie or just interested in current events. 

You’ve come to the right place for analysis of the most relevant current events and political issues.

Fitness With BowTiedOx

BowTiedOx provides you a place to find all of his latest programs and guides.

Weekly newsletters that cover fitness, health, and mindset, all grounded in the fundamentals of physiology.

Media Production with BowTied Turkey and BowTied Tamarin

Video is no longer optional.

Don’t get left behind.

Your brand deserves professional videos to engage your audience.

Art & Graphic Design with BowTied Patriot

BowTied Patriot is a graphic artist who specializes in photography, mixed medium custom artwork, and NFT creation.

Join BowTiedPatriot as he dives into making Art in Web3.0 and The Metaverse.

Cooking with BowTiedOctopod

Learn secrets from a fine dining chef for maximum flavor and time-saving efficiency

Newsletters on Ingredients, Techniques and Flavor hacks that will have you eating better. We will never eat bugs!

Meme Warfare with DgenFren

Increase your online engagement, organically influence narratives, and build your online persona by using marketing that your target audience actually wants: memes.

Learn How to Sell with BowTiedSalesGuy

Sales is one of the most transferrable life skills, yet few know how to actually sell.

Traditional sales tactics don’t cut it in today’s hyper competitive world.

Learn the secrets from a Chad Salesman and change your Life forever.

Ecommerce with BowTiedOpossum

Learn the skills to start and build your first online business.

Want to build a business that travels with you?

Learn from an industry veteran that has worked on and with brands you already know.