Solana

Web3 security firm Blowfish has detected two new Solana drainers that can perform bit-flip attacks, according to a Feb. 9 analysis shared on social media platform X.
The drainers, Aqua and Vanish, were flagged modifying a conditional within on-chain data, even after a user’s private key was used to sign a transaction. According to Blowfish, the drainers’ script is available for a fee in marketplaces offering scam-as-a-service tools. 
The Blowfish team broke down the method used by the drainers to flip data and steal funds: “On Solana, a dApp can be given authority to submit a transaction. If the dApp’s on-chain program includes a conditional that allows it to send the user SOL or drain their account, a drainer could flip that conditional at any time,” reads the analysis.
The drainers go unnoticed by users at first. The victim signs what appears to be a valid transaction. However, after receiving the signature, the drainer temporarily holds on to the transaction. “Then, via a separate transaction, they flip the dApp’s conditional; it goes from appearing to send SOL to taking it instead.” 
<blockquote class="twitter-tweet">
 There’s a completely new breed of scams on the loose, and they're not like anything we've seen before! Imagine: a transaction that appears safe when you sign it, but the moment it's submitted on chain, it suddenly drains your assets. Sounds like a nightmare, doesn't it? <a href="https://t.co/VkD4Cbhnh0">pic.twitter.com/VkD4Cbhnh0</a>— Blowfish (@blowfishxyz) <a href="https://twitter.com/blowfishxyz/status/1756079297344020927?ref_src=twsrc%5Etfw">February 9, 2024</a>
</blockquote> 
A bit-flip attack is a form of exploitation where the attacker&nbsp;<a href="https://nordvpn.com/cybersecurity/glossary/bit-flipping-attack/" target="_blank" rel="noopener nofollow">changes</a> the value of some bits in the encrypted data to manipulate a system. It allows the attacker to modify the encrypted message without knowing the encryption key. By flipping specific bits, an attacker can sometimes change a message in a predictable way once it’s decrypted.
A rising number of crypto drainers have targeted the Solana ecosystem. According to Chainalysis, one of the largest online communities devoted to a single Solana wallet drainer kit <a href="https://cointelegraph.com/news/solana-wallet-drainers-target-users-amid-rise-in-sol-price">had over 6,000 members as of January</a>. Brian Carter, Chainalysis senior intelligence analyst, told Cointelegraph in a previous interview that the most successful draining kits can target many assets in various ways.
The Blowfish team is said to have put defenses in place to block the newly found drainers automatically and is monitoring on-chain activity.
Magazine:&nbsp;<a href="https://cointelegraph.com/magazine/defis-billion-dollar-secret-the-insiders-responsible-for-hacks/">DeFi’s billion-dollar secret: The insiders responsible for hacks</a>

Scam-as-a-service: New Solana drainers identified

Cointelegraph

Other articles published on Feb 10, 2024

Dogecoin Foundation unveils ambitious roadmap for 2024, promising an exciting future ahead

Revolutionizing Historical Research: Swedish Lion AI Unveiled

Smart Tips for Making Profit with the RUNE Altcoin

A Comprehensive Guide to Ronin, an EVM Blockchain for Gaming

3 cryptocurrencies to reach $10 billion market cap in 2024

Spot Bitcoin ETF: Top Analyst Claims ‘Magnitude of Impact Not Priced In’

Join our free newsletter for daily crypto updates!