SlowMist: GitHub's popular Solana tool hides a trap for stealing coins

2025/07/03 19:34

PANews reported on July 3 that according to the SlowMist security team, on July 2, a victim claimed that he had used an open source project hosted on GitHub the day before - zldp2002/solana-pumpfun-bot, and then his encrypted assets were stolen. According to SlowMist analysis, in this attack, the attacker induced users to download and run malicious code by disguising as a legitimate open source project (solana-pumpfun-bot). Under the cover of boosting the popularity of the project, the user ran the Node.js project with malicious dependencies without any precautions, resulting in the leakage of the wallet private key and the theft of assets. The entire attack chain involves the coordinated operation of multiple GitHub accounts, which expands the scope of dissemination, enhances credibility, and is extremely deceptive. At the same time, this type of attack uses both social engineering and technical means, and it is difficult to fully defend against it within the organization.

SlowMist recommends that developers and users be highly vigilant against unknown GitHub projects, especially when it comes to wallet or private key operations. If you really need to run and debug, it is recommended to run and debug in an independent machine environment without sensitive data.

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

US House Designates ‘Crypto Week’ to Consider Three Sweeping Reforms – End of Regulatory Fog?

US House Designates ‘Crypto Week’ to Consider Three Sweeping Reforms – End of Regulatory Fog?

The US House GOP has announced the week of July 14 as “Crypto Week” to push three key crypto bills. Lawmakers will consider the CLARITY Act, the Anti-CBDC Surveillance State Act, and the Senate’s GENIUS Act, to be brought to a vote. 🚨NEW: Chairman @RepFrenchHill , @HouseAgGOP Chairman @CongressmanGT , and House Leadership announced that the week of July 14th will be “Crypto Week,” where the CLARITY Act, Anti-CBDC Surveillance State Act, and GENIUS Act will be considered. @SpeakerJohnson @SteveScalise … pic.twitter.com/vIUoGaoSy1 — Financial Services GOP (@FinancialCmte) July 3, 2025 House Speaker Mike Johnson, Financial Services Committee Chair French Hill, and Agriculture Committee Chair GT Thompson announced the move Thursday . The move arrives following the passage of President Donald Trump’s ‘ Big Beautiful Bill .’ The US lawmakers noted that the mid-July review will create a clear regulatory framework for digital assets, protect financial privacy and foster the country’s position as a global crypto leader. “House Republicans are taking decisive steps to deliver the full scope of President Trump’s digital assets and cryptocurrency agenda,” Speaker Mike Johnson said in a statement. Here’s What the Legislation Package Aims to Address Legislators called the move a “historic” opportunity for the US to deliver a clear, pro-innovation framework for crypto. The package of legislation would address issues such as stablecoin oversight, crypto market rules, and permanently banning the creation of a US CBDC. The effort reflects years of bipartisan work and aligns with President Trump’s pro-crypto agenda. The CLARITY Act, which passed through the House panel with a 47-6 vote last month, would set clear lines between crypto commodities and securities. The bill would drive regulatory certainty and possibly invite more institutional players. Besides, the stablecoin bill GENIUS Act, will be the top priority during the Crypto Week. The Senate already approved the bill last month in a 68-30 vote. 📜 The US Senate passes the GENIUS Act in a 68–30 vote, marking the first major federal step to regulate stablecoins and shape crypto policy. #GENIUS #StablecoinRegulation https://t.co/tzKz59abyB — Cryptonews.com (@cryptonews) June 18, 2025 The House had previously pushed its own version of stablecoin legislation dubbed the STABLE Act. However, lawmakers are turning to the Senate’s GENIUS Act version. Further, the Anti-CBDC Surveillance State Act would block the creation of a federal digital dollar. The bill already passed out of the US House Financial Services Committee with a 27-22 vote in April. Crypto Week – A Pathway to Clear Regulation? According to Majority Leader Steve Scalise, these pieces of legislation not only further the President’s pro-growth agenda, but provide a clear regulatory framework for digital assets. Rep. Tom Emmer, a leading crypto advocate, said that America is one step closer to having clarity in digital assets. Passing of these bills will defend financial privacy and reinforce U.S. dominance in crypto innovation, he added. “A new day for American excellence has finally arrived, and now it’s time to get the job done.”
Share
CryptoNews2025/07/04 11:45
Backpack: will compensate users who suffer unexpected losses during maintenance

Backpack: will compensate users who suffer unexpected losses during maintenance

PANews reported on July 3 that according to official news, Backpack said on the X platform: "Today, all users holding positions will receive double points rewards. For users who suffer
Share
PANews2025/07/03 23:43