Follow Us @
Solana’s Web3 library is hacked and exposes developers to risks
-Trending Marketing news, content marketing, latest Ways to rank your website, marketing discoveries, Local SEO, seo and social media marketing services. enjoy your stay on our website.
Hackers compromised the library web3.js of Solana in a supply chain attack. The action resulted in the installation of malicious packages that stole users’ private keys and drained their funds.
Solana developer @trentdotsol was the one who reported the attack, which specifically affected versions 1.95.6 and 1.95.7 from the library.
The library web3.js Solana is widely used by developers to create applications based on the Solana blockchain. Reports indicate that hackers gained access to a publishing account through a phishing campaign.
From there, they introduced a function called addToQueuewhich acted maliciously under the guise of Cloudflare headers.
Solana: limited impact and quick response
According to data from the Solscanhackers managed to steal around US$ 160 thousand during the attack. The issue was detected quickly, and the compromised versions were removed within hours.
Despite the severity of the incident, many Solana-based projects stated that they were not affected. Among them are Solflare, Phantom Wallet and Helium. These applications have confirmed that they do not use the vulnerable versions of the library.
The research company Anza clarified that the problem is not related to the Solana protocol, but rather to the JavaScript library. She highlighted that only projects that directly manipulate private keys and updated on December 2 were impacted.
Solana developers recommended that all projects immediately upgrade to the latest version 1.95.8 from the library web3.js. They also warned that those using the “pinned to latest” setting should ensure they update to the new version.
The Solana blockchain has faced significant challenges related to the stability of its network, resulting in multiple outages in recent years.
In September 2021, the network suffered an outage of approximately 17 hours due to a denial of service (DDoS) attack caused by bots that overwhelmed the system with 400,000 transactions per second.
Solana’s Web3 library is hacked and exposes developers to risks
Follow TODAYSGIST on Google News and receive alerts for the main trending SEO news, Ai news, latest Ways to rank your website, marketing discoveries, Local SEO and lots more!
Solana’s Web3 library is hacked and exposes developers to risks
SHARE POST AND EARN REWARDS:
Did you like this post?!!! Join our Audience reward campaign and make money reading articles, shares, likes and comment >> Join reward Program
FIRST TIME REACTIONS:
Solana’s Web3 library is hacked and exposes developers to risks
Be the first to leave us a comment, down the comment section. click allow to follow this topic and get firsthand daily updates.
JOIN US ON OUR SOCIAL MEDIA: << FACEBOOK >> | << WHATSAPP >> | << TELEGRAM >> | << TWITTER >
Solana’s Web3 library is hacked and exposes developers to risks
