2024

Solana

when

Read

<p class="is-style-lead">Web3 security company Blowfish recently detected a pair of sophisticated Solana (<a href="https://crypto.news/price/solana/" target="_blank" rel="noopener noreferrer nofollow">SOL</a>) transaction drainers capable of executing elusive bit-flip attacks.</p>
<p>The firm’s Feb. 9 analysis details how these drainers — dubbed aqua and vanish — can alter a condition in on-chain data post-transaction signature by the user’s private key.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">There’s a completely new breed of scams on the loose, and they're not like anything we've seen before!<br><br>Imagine: a transaction that appears safe when you sign it, but the moment it's submitted on chain, it suddenly drains your assets.<br><br>Sounds like a nightmare, doesn't it? <a href="https://t.co/VkD4Cbhnh0" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/VkD4Cbhnh0</a></p>— Blowfish (@blowfishxyz) <a href="https://twitter.com/blowfishxyz/status/1756079297344020927?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">February 9, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>These dangerous scripts lurking under the transactional radar are being peddled on the dark web, offering scammers a scam-as-a-service toolkit.</p>
<p>The Blowfish examination highlights the drainers’ adept use of the on-chain authority provided to <a href="https://crypto.news/glossary/decentralized-applications-dapps/" target="_blank" rel="noopener noreferrer nofollow">decentralized apps</a> (dapps), enabling them to switch from transaction facilitators to malicious account-draining entities.</p>
<p>According to the security firm, the troubling aspect of these attacks is their stealth; victims initially see valid transactions, which are then intercepted and manipulated by the attackers to extract cryptocurrency from the user’s account.&nbsp;</p>
<p>Such bit-flip attacks threaten transaction integrity by flipping bits in the encrypted data, altering the decrypted message without accessing the encryption key.</p>
<p>You might also like: <a href="https://crypto.news/solana-stops-processing-transactions-sol-sinks-by-4/" rel="noopener noreferrer nofollow"> Solana stops processing transactions, SOL sinks by 4% </a></p>
<p>The discovery has cast a spotlight on the evolving cyber threat landscape within <a href="https://crypto.news/page/2/?s=solana" target="_blank" rel="noopener noreferrer nofollow">Solana’s</a> network. This increasing threat is underscored by a Chainalysis report that discloses a large community associated with a Solana wallet drainer kit, teeming with over 6,000 participants as of January.&nbsp;</p>
<p>These drainers symbolize the ease with which cybercriminal tools can now be acquired and employed, particularly as Solana gains traction as a prime target due to its rising fame.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">/3 As Solana continues to gain popularity, drainer groups are increasingly moving towards it, as indicated by the growing number of malicious Solana dApps detected by Blockaid.</p>— Blockaid (@blockaid_) <a href="https://twitter.com/blockaid_/status/1742143941049246155?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">January 2, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>In response to this growing menace, Blowfish stated it had implemented automatic defenses to neutralize these new drainers while continuing to monitor on-chain activity vigilantly.</p>
<p>However, crafting foolproof security remains challenging despite these efforts, as attackers incessantly evolve and refine their avoidance tactics.</p>
<p>The firm’s investigation also unearthed international elements at play, with suspected Russian developers notably involved in crafting and circulating such <a href="https://crypto.news/?s=wallet+drainers" target="_blank" rel="noopener noreferrer nofollow">drainer</a> tools — often accompanied by Russian documentation.</p>
<p>Finally, community solidarity has become crucial in the fight against these threats, with blockchain advocates rallying together to develop and employ protective measures like <a href="https://twitter.com/wallet_guard/status/1740875258188435959?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1740875258188435959%7Ctwgr%5E2232e393620c06fa75569f95afd35b6e3c099952%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcointelegraph.com%2Fnews%2Fsolana-wallet-drainers-target-users-amid-rise-in-sol-price" target="_blank" rel="noopener noreferrer nofollow">Wallet Guard</a>, enhancing user defenses against such predatory phishing-oriented attacks.</p>
<p>Zug, Switzerland-based Blowfish works with some 30 customers, including WalletConnect, to help prevent over 500,000 wallet-draining attacks.</p>
<p>Read more: <a href="https://crypto.news/solana-network-resumes-operations-following-extended-outage/" rel="noopener noreferrer nofollow"> Solana network resumes operations following extended outage </a></p>

Blowfish exposes new ‘aqua, vanish’ bit-flip drainers on Solana

crypto.news

Other articles published on Feb 10, 2024

A Comprehensive Guide to Ronin, an EVM Blockchain for Gaming

Why Altcoins Suffer While Bitcoin’s $50k Becomes “Widely Anticipated”

Dymension (DYM) Price Ready to Go Up By 20%! Will it Reach $10?

Stream, Invest, Thrive: DeeStream (DST) Dominates while JUP and ADA Play Catch-Up

How to Avoid Crypto Scams in 2024

Bitcoin Halving Report from Grayscale, the World’s Largest Digital Asset Manager: “This Time It W...

Join our free newsletter for daily crypto updates!