The 20-month Fearless Wallet breach has exposed a potential security weakness in Polkadot's shorter staking withdrawal period. The Polkadot Community Foundation said eight users reported unauthorized transactions totaling 17,286 DOT. Polkadot's July upgrade cut nominators' maximum unbonding period from 28 days to two days, reducing the time available to protect compromised accounts. The shorter period has not been established as the cause of any reported unauthorized transfers. The foundation urged affected users to secure remaining funds with new credentials and consider recovery assistance before unstaking locked assets.