Solana, USDC Drained From Wallets in Attack
An unknown attacker drained thousands of wallets containing at least $4 million worth of Solana and USDC late Tuesday night. The hack, which was still ongoing at 8:00 PM PST, seemed to originate on the Solana browser wallet Phantom and was believed to compromise user keys—possibly involving seedphrases that were re-used among wallets on different chains.
See related article: Solana Price Prediction
“Over 5,000 Solana wallets have been drained in the past few hours,” blockchain audit firm OtterSec reported earlier in the evening. “These transactions are being signed by the actual owners, suggesting some sort of private key compromise.” Watcher Guru updated the count to 8,000 a short while later.
Engineers across the Internet, including blockchains other than Solana, were working together to try and understand both the cause of the exploit and its extent. "We are actively communicating with the affected wallet teams to offer our help and monitor if there is anything we can do to keep our users safer," a spokesperson for the Ethereum wallet MetaMask told Decrypt.