🚨 Chrome extension silently steals money from Solana traders for months

Crypto Copilot — an extension that allows swapping Solana tokens directly on X — has been found to secretly inject hidden money transfer commands into each transaction since June.

How it works: transactions are still sent through Raydium as usual, but with an automatic withdrawal command for SOL:

• < 2.6 SOL: loses 0.0013 SOL

• ≥ 2.6 SOL: loses 0.05% (for example, swap 100 SOL → loses ~0.05 SOL)

Experts warn: Chrome extensions have long been a "hotspot" for tricks to steal crypto assets due to the large user base and deep access to the browser.