SlowMist: Beware of Solana Wallet Owner Authority Tampering Attack
BlockBeats News, December 3rd. SlowMist Security Team released a security advisory regarding a recent phishing attack incident. A user fell victim to a phishing attack, resulting in the transfer of the account's Owner permission. The user attempted to revoke the authorization but was unable to do so. The user's assets worth over $3 million were stolen, with an additional $2 million worth of assets stored in a DeFi protocol that could not be transferred (currently, this part of the assets worth around $2 million has been successfully rescued with the assistance of the related DeFi protocol). This attack was not the traditional "authorization theft" but rather a replacement of the core permission (Owner permission) by the attacker, rendering the victim unable to transfer funds, revoke authorization, or operate DeFi assets despite the funds "appearing normal" but being beyond their control.
The attacker exploited two counterintuitive scenarios to successfully deceive the user into clicking:
1. Usually, when signing a transaction, the wallet would simulate the execution result of the transaction. If there were any fund changes, it would be displayed on the user interface. However, the attacker's carefully crafted transaction showed no fund changes;
2. In the traditional Ethereum EOA account, the ownership is controlled by the private key. Users subjectively were unaware that Solana has a feature that can modify account ownership.
SlowMist reminds users to be vigilant when authorizing signatures and to confirm whether there are hidden operations such as modifying high-risk permissions like Owner in them.
You may also like

a16z Partner Manifesto: Boutique VC is Dead, Go Big or Go Home

Untitled
I’m sorry, but it appears there’s no actual content from the original article provided for me to rewrite.…

Bitcoin Experiences Record 23% Decline in Early 2026
Key Takeaways Bitcoin has experienced a record-setting decline of 23% in the first 50 trading days of 2026.…

Whale Holding 105,000 ETH Faces $8.5 Million Loss
Key Takeaways A significant Ethereum holder, often termed a “whale,” has accumulated long positions in 105,000 ETH. The…

Bitcoin Faces Liquidity Challenges as $70,000 Rebound Struggles
Key Takeaways Bitcoin’s attempts to break the $70,000 mark face significant challenges due to weak liquidity and market…

Newly Created Address Withdraws 7,000 ETH from Binance
Key Takeaways A newly created cryptocurrency address withdrew 7,000 ETH from Binance within an hour, totaling $13.55 million.…

Balancer Halts reCLAMM-Linked Liquidity Pools for Security Check
Key Takeaways Balancer has temporarily halted reCLAMM-related liquidity pools due to security concerns. A report from the bug…

Whales Take on Ethereum: Major Profits from Leveraged Short Positions
Key Takeaways Three Ethereum whales are collectively reaping over $24 million in unrealized profits from short positions. The…

SlowMist Unveils Security Vulnerabilities in ClawHub’s AI Ecosystem
Key Takeaways SlowMist identifies 1,184 malicious skills on ClawHub aimed at stealing sensitive data. The identified threats include…

Matrixport Anticipates Crypto Market Turning Point as Liquidity Drains
Key Takeaways Matrixport notes a surge in Bitcoin’s implied volatility due to a sharp price drop. Bitcoin price…

Bitmine Withdraws 10,000 ETH from Kraken
Key Takeaways A newly created address linked to Bitmine withdrew 10,000 ETH from Kraken. The withdrawal value amounts…

In the face of the Quantum Threat, Bitcoin Core developers have chosen to ignore it

Don't Just Focus on Trading Volume: A Guide to Understanding the "Fake Real Volume" of Perpetual Contracts

Crypto Price Prediction Today 18 February – XRP, Bitcoin, Ethereum
Key Takeaways XRP’s potential as a replacement for SWIFT is bolstered by regulatory approvals, potentially driving its price…

XRP Price Prediction: XRP is Outpacing Solana and Targeting Binance Coin Next – Should You Invest Now?
Key Takeaways XRP Ledger has moved into the sixth place by tokenized real-world asset value, surpassing Solana and…

New AI Predicts the Price of XRP, Dogecoin, and Solana By 2026
Key Takeaways ChatGPT anticipates significant price increases for XRP, Dogecoin, and Solana by the end of 2026. XRP…

Arthur Hayes Shares Two Scenarios for Bitcoin Price, Calling for a Major Crypto Rally
Key Takeaways Arthur Hayes predicts a significant crypto rally fueled by a $572 billion liquidity injection from the…

Bitcoin Price Prediction: Abu Dhabi Gov Funds Buy $1 Billion in BTC – What Do They Know?
Key Takeaways Abu Dhabi has revealed a $1 billion stake in Bitcoin through major ETF investments, signaling strong…
a16z Partner Manifesto: Boutique VC is Dead, Go Big or Go Home
Untitled
I’m sorry, but it appears there’s no actual content from the original article provided for me to rewrite.…
Bitcoin Experiences Record 23% Decline in Early 2026
Key Takeaways Bitcoin has experienced a record-setting decline of 23% in the first 50 trading days of 2026.…
Whale Holding 105,000 ETH Faces $8.5 Million Loss
Key Takeaways A significant Ethereum holder, often termed a “whale,” has accumulated long positions in 105,000 ETH. The…
Bitcoin Faces Liquidity Challenges as $70,000 Rebound Struggles
Key Takeaways Bitcoin’s attempts to break the $70,000 mark face significant challenges due to weak liquidity and market…
Newly Created Address Withdraws 7,000 ETH from Binance
Key Takeaways A newly created cryptocurrency address withdrew 7,000 ETH from Binance within an hour, totaling $13.55 million.…