🚨 Polkadot Foundation Warns of Fearless Wallet Extension Private Key Leak
The Polkadot Community Foundation has issued a serious security warning regarding several versions of the Fearless Wallet browser extension, including versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5. According to the warning, these versions contain malicious code that can transmit users’ private keys to a server controlled by an attacker whenever the wallet is unlocked. If exploited, this vulnerability could allow attackers to gain control of affected wallets and steal users’ cryptocurrency assets. Users who have installed any of the flagged versions should treat their wallets as potentially compromised and take immediate security precautions. They should avoid entering their recovery phrases into the affected extension and move their funds to a newly created, secure wallet using a trusted device and clean wallet software. Simply uninstalling the extension may not be enough to protect assets if the private keys have already been exposed. The incident highlights the importance of wallet security, software verification, and protecting private keys when managing digital assets.
The Polkadot Community Foundation has issued a serious security warning regarding several versions of the Fearless Wallet browser extension, including versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5. According to the warning, these versions contain malicious code that can transmit users’ private keys to a server controlled by an attacker whenever the wallet is unlocked. If exploited, this vulnerability could allow attackers to gain control of affected wallets and steal users’ cryptocurrency assets. Users who have installed any of the flagged versions should treat their wallets as potentially compromised and take immediate security precautions. They should avoid entering their recovery phrases into the affected extension and move their funds to a newly created, secure wallet using a trusted device and clean wallet software. Simply uninstalling the extension may not be enough to protect assets if the private keys have already been exposed. The incident highlights the importance of wallet security, software verification, and protecting private keys when managing digital assets.