1022

• Polkadot Community Foundation warned Fearless Wallet users on October 21 to treat accounts as compromised
• Malicious code in builds 3.0.1, 3.0.3, 3.0.4 and 3.0.5 sent private keys to tonscanner.org
• A remote switch kept the exfiltration active for about 571 days across nine periods
Keys Copied From February 2025
The Polkadot Community Foundation told anyone who used the Fearless Wallet browser extension at any point since February 19, 2025 to treat every account holding Polkadot (DOT) or any other asset in it as compromised and move the funds straight away. The warning, issued on October 21, 2026, follows the discovery of code inside the extension that copied private keys to an attacker-controlled server and remained active at intervals through October 10, 2026, a window of nearly 20 months. Four builds carried the code: 3.0.1, 3.0.3, 3.0.4 and 3.0.5. It activated when a user unlocked the wallet with the right password. A technical analysis linked in the notice describes the mechanism: the extension gathered each account's recovery phrase, the master seed of an HD wallet, or its backup file, together with the wallet password. It encrypted the bundle with an empty password, a step anyone can reverse, and uploaded the result to tonscanner.org. The code entered the project through GitHub pull request #1022, merged as part of a larger change titled “TON ecosystem” to the extension's public source. Versions 3.0.3 to 3.0.5 also read a configuration file in a separate public repository that worked as a remote on and off switch. The guidance is unconditional. A private key gives total control of an account, so changing a password or reinstalling the extension changes nothing; whoever holds the key can sign transfers and empty the balance. The foundation advised a fresh keypair in a different, well-maintained crypto wallet, with funds shifted off the old account on every chain it touched, ideally without unlocking Fearless again. It named Nova Wallet as one option for the new account. The Polkadot price stood at $1.17 as the notice circulated, up 3% over seven days and down 62.7% across the year.
Eight Reports, 17,286 DOT Unconfirmed
GitHub's public activity log records the remote switch as on during nine separate periods between March 7, 2025 and the October 10, 2026 endpoint, roughly 571 days in total. The code was removed from the project's source on June 25, 2026, yet installed copies of versions 3.0.3 to 3.0.5 still carry it. Each unlock makes those copies check the remote switch, which is off at present but can be switched back on. The foundation told users to shift the funds first, then uninstall the extension. The Firefox build ran the same code and is no longer listed; keys used in it inside the window should be treated as compromised too. The reviewed Android and iOS applications contain none of the code, though the notice adds that a private key ever present in the extension is compromised wherever that key is used. A browser extension is by construction a hot wallet, holding keys on an internet-connected device, and version 3.0.5 remained downloadable in Chrome's store with a user base of 6,000 on October 21. Eight users have come forward with unauthorized transfers that may be tied to the exploit, a reported total of 17,286 DOT; the case log states those reports do not prove theft. The first case is dated September 30, 2025; a Reddit post followed on October 6, 2025, with several users saying funds moved the moment they unlocked the wallet. Staked coins, nomination pool deposits and coins locked for governance cannot move immediately. Nominators face an unbonding period of one to two days at the shortest, and the notice directs users to PAPI Rescue, a tool from the polkadot-api team, ahead of any unstaking. Nobody, the foundation added, including the PAPI Rescue team, needs a user's private keys; anyone who messages first with an offer to recover funds is not legitimate. Fearless Wallet is built by an independent team and, the notice stated, is not and never was an official Polkadot wallet. The month is otherwise busy for the chain: the dotUSD stablecoin went live earlier in October, and the DAO primacy referendum over dotUSD is covered separately.
The Remote Switch Is Off, for Now
The exposure is permanent by design: a leaked private key cannot be rotated, only the funds moved away from it. What the record does not yet contain is scale. The foundation has published no count of affected accounts, and the 17,286 DOT on file is reported rather than confirmed stolen. Two observations would change that picture, and the notice defines both: the remote switch flipping back on, or a fresh run of unlock-time transfers like the eight users described. Neither has been recorded since October 10, 2026. For keys that must stay offline after the migration, a cold wallet is the practical endpoint, and our Cypherock X1 walkthrough covers one such setup.

16:47（刚刚）ERA 在5分钟内出现拉升7.6%（5分钟窗口 16:42→16:47），截至 16:47:29 现价 0.06492，24h +9.9%。
📅 数据截至 16:47:29（事件触发时间见各条标注，价格为撰稿时实时快照）
📌 一句话看点：短时动能集中，回撤往往来得快——分批挂单比追高更稳
市场概览：BTC 81,639.50(-0.84%) · ETH 2,432.60(-1.15%)；全市场 24h 上涨 44 家 / 下跌 313 家；24h领涨 GTC+21.00%，领跌 PROM-16.59%。
—— 异动详情 ——
一、5分钟急动
- $ERAUSDT 5分钟急动 +7.65% 🕐16:47触发（刚刚） 〔窗口 16:42→16:47 5分钟〕
现价 0.06492 | 24h +9.90% | 现货 0.0662 | 基差 +1.97%
价差 0.06% | 24h额 $7.7M | 换手 131.7% | CMC #1022
市值 $8.9M | 稀释 $59.9M | 距史低 1.30x（史低 0.05）
支撑 S1 0.06322（-2.6% 强·触11次） · S2 0.06284（-3.2% 弱·触1次） · S3 0.06084（-6.3% 强·触8次） · S4 0.05838（-10.1% 强·触7次·共振） · 史低 0.05（-23.0% 弱·未验证）
建仓 偏多·不追高 | 入场 回踩 0.06322 40% / 0.06284 40% / 0.06084 20% | 止损 0.0597（-8.0%·1ATR） | 目标 0.0895 | 仓位≤10%·杠杆≤3x
📊指标(1h) 【趋势】ADX30中·均线多头·MACD多头 | 【动量】RSI79超买·SRSI94·KDJ92·CCI323·WR-7 | 【量能】OBV量能累积·VWAP上方·量比1.3x·OI-0.7%·费率-0.0574%空拥挤 | 【位置】BOLL破上轨·ATR1.8% 》可靠度高·偏多（10多/0空/10项）
策略 顺势回踩接多·超买减配 | 分批: S1 40%→S2 40%→S3 20% | 加仓: 前批浮盈≥1ATR再接次批 | 移动止损: 浮盈≥1.5ATR止损推至成本, ≥3ATR改1ATR跟踪 | 失效: 放量跌破S3 | 48h未成交撤单
🔬 硬核技术分析（ERAUSDT）
· 趋势结构: 日线偏空/1h未共振（25/40）
· 量价关系: 近24h均量放大1.6x，上涨放量·结构健康（15/15）
· 动量状态: RSI 79(超买); MACD柱 走强（5/15）
· 背离检测: 无显著背离（+0）
· 波动率: 1h ATR占比 1.8%，处近7日 67 分位
· 多空力量: 近48根多头占比 50%；下影 23% vs 上影 22%
· 综合评分: 45/100 → 中性（趋势40+量价15+动量15+背离±10；≥60偏多，≤40偏空）
▶ 5分钟内价格单边急动，短时动能集中，警惕追高/踩踏后的快速回撤。
—— 互动 ——
你在盯 ERA 吗？评论区聊聊你的看法👇 关注我，异动 + 支撑 + 建仓策略第一时间推送。
数据来源：币安现货/合约实时行情与盘口、CMC 聚合数据；16:47:29 撰稿，事件均在 30 分钟时效内；仅供参考，不构成投资建议。
#币安广场 #加密货币 #合约交易