In an attack that’s still ongoing, hackers drained about $8 million worth of cryptocurrency and counting from internet-connected wallets on the Solana blockchain, filching assets from about 8,000 wallets, predominantly from mobile wallet users of Phantom and Slope.
Solana told users very early this morning that so far, 7,767 wallets are affected by the theft, whose cause remains unknown. “Engineers are currently working with multiple security researchers and ecosystem teams to identify the root cause of the exploit,” Solana tweeted around 1 a.m.
The attack likely began Tuesday night. In a Wednesday midmorning update, Solana says that the exploit is likely not the result of a bug on the blockchain’s core code, but in “software used by several software wallets popular among users of the network.”
Blockchain security firm PeckShield says the hack is “likely due to the supply chain issue exploited to steal/uncover user private keys behind affects wallets.”