Solana has disclosed new information regarding today’s attack.
Earlier, it was suspected that a hack of the third-party pockets app Slope resulted in the loss of over 8,000 email addresses.
This afternoon, Solana Standing confirmed that the compromised addresses “had at some point been created, imported, or used for Slope mobile pockets functions.”
It was also disclosed that private key information was inadvertently transferred to a utility monitoring firm. It was stated that new information “is still being investigated.”
Although hundreds of wallets had been emptied, Solana confirmed that the breach was limited to a single wallet. It was added that the Solana protocol remains secure.
In addition, the attack affected just Slope’s downloaded pockets app. Hardware wallets from Slope remain secure.
Additionally, Slope commented on the situation. It stated that a “cohort” of Slope wallets had been compromised and verified that some wallets belonging to its own employees had been emptied.
Slope stated that it had not yet confirmed the nature of the attack. “We’ve got some hypotheses as to the character of the breach, however nothing is but agency,” Slope mentioned in its official assertion. It dedicated to publishing a full autopsy sooner or later.
Additionally, the company suggested that users take steps to safeguard their assets. It advised users to generate a new seed phrase and wallet, then transfer their cash to the new wallet.
Both companies claim to be conducting internal investigations and working with external auditors.
Numerous individuals within the Solana ecosystem provided information and speculation on the attack earlier today.
This year, at least two initiatives inside the Solana ecosystem have been compromised. In March, $28 million was stolen from Cashio, whereas $322 million was stolen from Wormhole in February.