By smashing and looting customers' wallets, the hackers managed to drain an estimated $6 million.
The exact vector of the attack is unclear, and speculation about the cause of the vulnerability has grown.
Some use @phantom or @MagicEden to exhaust 6 million exploits in about 10 minutes. Virtually every imaginable wallet is damaged. I'm not sure if there are other wallets.
Solana Offense: Sudden Dilemma
Solana Ecosystem Facilitator @SolportTom was one of the first to sound the alarm on Twitter over the vulnerability detection.
"No mints in the drain," Tom said on August 3rd. "These transactions look like normal money transfers, not contract transfers. It's the whole ecosystem, and we suspect it's related to gambling services."
Solana Attack
While some customers were quick to link the hackers to the Phantom wallet, the company was quick to deny the claims.
"We are working closely with other teams to understand reported vulnerabilities in the Solana ecosystem," Phantom said. "Currently, the team doesn't think so about the Phantom's unique conundrum."
CryptoTwitter user and crypto developer @0xfoobar has his theories as to why, with the attack tied to a widespread private key leak. Foobar's claim that both the Phantom and Slope wallets were affected, lends some credibility to the Phantom claim.
"The solution is to move the assets into a wallet that never exposes the private keys to potentially offensive browser extensions," foobar said. "It means hardware wallets, nothing more."
Solana mass exploitation/draining is happening and seeing it a lot of people living in Taiyo lose all their balance out of nowhere.
Transfer everything to ledger at once.
Send to cold wallet and revoke access
It is recommended that without a clear explanation of the offense, Solana customers revoke access to all content and send all digital currency to hardware wallets. Sending all funds to a centralized custodial exchange is an acceptable temporary workaround for users without hardware wallets.
