Solana Web3.js Library Compromised in Targeted Supply Chain Attack

Decrypt 11 months ago 128

A significant supply chain attack has impacted the Solana ecosystem, targeting the @solana/web3.js JavaScript library, a critical tool that developers rely on to create decentralized applications (dApps) on the Solana blockchain.

On December 2, hackers gained access to the account of a developer maintaining the @solana/web3.js library. It’s a tool that’s been downloaded more than 350,000 times weekly by Solana app developers.

Hackers compromised versions 1.95.6 and 1.95.7, embedding malicious code that exfiltrated private keys and drained funds. The breach led to $160,000 in stolen assets, including SOL ($144.03) tokens and other crypto assets, according to Solscan data.

Solana-focused development team Anza disclosed the breach on Tuesday saying it occurred when a publish-access account for the library on npm was compromised.

Earlier today, a publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal ...

BitRss shares this Content always with

License.

Read Entire Article

Screenshot generated in real time with SneakPeek Suite

Search Crypto News

The latest Top News, only from Leading exponents of BlockChain, Bitcoin, Altcoins and different Accredited Crypto Currency Sources.

Since 2015, our Mission was to Share, up-to-date, those News and Information we believe to represent in an Ethical and sincere manner the current Crypto Currencies World: everything you are looking for, in one place!

We have always tried to give priority to the News and the Sources; for this reason we have designed this New Version of BitRss.com with a clean and simple Style, usable by all Devices, fast and effective. Our exclusive Algorithm, in addition to filtering (a lot..) sponsored content of dubious interest, Lists the News, in Chronological order of Publication on the Internet, allowing our Users to Follow the Flow of Articles in a fast and intuitive way.

You can also check the Cryptocurrency Price in Real Time directly in the shared Articles (the TAG's highlighted in green), which allows you to Learn more about the Market Trend of that particular Coin with many other related information. Each content includes always a Screenshot of the Article's Source.