Fearless Wallet: private key leak alert
On October 21, the Polkadot Community Foundation published a notice about the Fearless Wallet extension, an independent application.
According to the notice, versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 contained code that sent the private key to an attacker’s server when the wallet was unlocked. The code was added on February 19, 2025; the date of the notice is not the date the issue began.
The issue is confirmed in Chrome. Firefox shared code and should be treated as compromised if it was used during the period in question. The mobile versions reviewed do not contain that code; reusing a key exposed in the extension leaves you at risk.
The official recommendation for anyone who used the extension from February 2025 onward is to generate new keys outside Fearless and transfer their funds. Changing the password, reinstalling, or importing the same seed phrase into another app is not enough. Locked funds require specific attention; consult the notice before taking action. Never give your seed phrase to anyone claiming they can recover your funds.
Market snapshot: Binance spot, on 21/10 at 18:26 UTC, showed DOT at 1,189 USDT (+1.54% in 24 hours) and BTC at 84.832,01 USDT (+2.79%). The price change does not allow us to attribute a market reaction to the notice or determine whether an account is safe. The risk described lies in the extension and its keys; it does not demonstrate a failure of Polkadot’s consensus mechanism.
Source: Polkadot Community Foundation notice on its forum.
$DOT $BTC $USDT
Educational content. Not financial advice.
#Polkadot #FearlessWallet #SeguridadCripto #SelfCustody