Solana and Slope confirm hack that affected over 8,000 wallets

Solana and Slope have provided additional information about a security breach that affected a multitude of wallets.

Nearly 8,000 addresses were siphoned by what was believed to be a hack of the third-party wallet application Slope. Solana has confirmed that the addresses affected by the attack “were at some point created, imported, or used in the Slope mobile wallet applications“.

After an investigation by developers, ecosystem teams, and security auditors, it appears affected addresses were at one point created, imported, or used in Slope mobile wallet applications. 1/2

– Solana Status (@SolanaStatus) August 3, 2022

Solana added that the private key information was accidentally passed on to an application monitoring service. She noted that other details “are still under investigation“.

Although thousands of wallets have been emptied, Solana confirmed that the hack was confined to a single Solana wallet. She added that Solana, its blockchain protocol and cryptography remain secure.

Additionally, the attack only affected Slope’s downloadable wallet app. Slope’s hardware wallets are still secure.

Slope also commented on the situation. She stated that a “cohort“Slope portfolios had been compromised in the breach and confirmed that his own staff portfolios had been emptied.

Slope said he had not confirmed the nature of the attack. “We have some speculation as to the nature of the breach, but nothing is certain yet“, Slope said in his official statement. Slope pledged to release a full report in the future.

The company also suggested users take steps to secure their funds. It advised users to create a new passphrase and wallet and transfer their funds to that wallet.

Both companies say they are conducting internal investigations and working with outside auditors. Various other people within the Solana ecosystem provided information and speculation about the attack earlier today.

At least two other projects in the Solana ecosystem have been hacked this year. Cashio was hacked for $28 million in March, while Wormhole was hacked for $322 million in February.