Solana

Reddit

Jupiter

<p class="is-style-lead">The Jupiter exchange is warning of a malicious Chrome extension called “Bull Checker,” which it says is targeting Solana users.</p> 
<p>The exchange’s warning comes in the wake of complaints by several Solana (<a href="https://crypto.news/price/solana/" target="_blank" rel="noreferrer noopener">SOL</a>) decentralized finance users about having their crypto wallets drained.</p> 
<p>In an Aug. 19 post on X, the Jupiter (<a href="https://crypto.news/price/jupiter/" target="_blank" rel="noreferrer noopener">JUP</a>) team said they carried out extensive <a href="https://www.jupresear.ch/t/identification-of-malicious-extension/21584" target="_blank" rel="">investigations</a> into the complaints and identified the malicious browser extension.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Identification Of Malicious Extension<br>Over the last week, we received reports that a small number of users using Solana DeFi got drained.<br><br>After extensive investigation, we have identified a malicious Chrome extension called “Bull Checker” that had targeted users on several… <a href="https://t.co/pubayfmD9h" target="_blank" rel="">pic.twitter.com/pubayfmD9h</a></p>— Jupiter 🪐 (@JupiterExchange) <a href="https://twitter.com/JupiterExchange/status/1825600323320434830?ref_src=twsrc%5Etfw" target="_blank" rel="">August 19, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Per the team’s post, Bull Checker has targeted members of various <a href="https://crypto.news/tag/solana/" target="_blank" rel="noreferrer noopener">Solana</a> subreddits on the Reddit social platform.&nbsp;The team notes that while the extension allowed for users to interact normally with decentralized applications on Solana, in several cases when users interacted with dapps, it added malicious instructions to a transaction that transferred users’ tokens to a different address.</p> 
<p> You might also like: <a href="https://crypto.news/ex-ceo-of-kansas-bank-sentenced-to-over-24-years-for-47m-crypto-fraud/"> Ex-CEO of Kansas bank sentenced to over 24 years for $47m crypto fraud </a> </p> 
<p>When being installed, Bull Checker asks for permission to read and change all the data on the website, a requirement the Jupiter team said is unnecessary for a read-only extension that allows users to view <a href="https://crypto.news/tag/meme-coin/" target="_blank" rel="noreferrer noopener">meme coin</a> holders.</p> 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 <p>This should have been a major red flag for users, but apparently, several users continued to install and use the extension.</p> <cite>Meow, Jupiter Exchange founder</cite>
</blockquote> 
<h2 class="wp-block-heading" id="reddit-promoted-chrome-extension-targets-solana-users">Reddit-promoted Chrome extension targets Solana users </h2> 
<p>The extension was allegedly promoted by an anonymous Reddit user going by the pseudonym “Solana_OG,” who reportedly targeted members of different Solana subreddits looking to trade Solana meme coins and encouraged them to download the extension.</p> 
<p>In one of their Reddit posts, Solana_OG claimed to have made $3,000 in a week by using the extension.</p> 
<p>As of press time, the extension seemed to have been removed from the Chrome Web Store, with a notice on the link saying, “This item is not available.” Nonetheless, the Jupiter exchange team advised users to stay alert for similarly malicious extensions. The team asked members of the crypto community to be wary of extensions that ask for “read” and “change” permissions.</p> 
<p>Jupiter also warned users to be wary of all recommendations and popular tools, as scammers may use <a href="https://crypto.news/friendly-fraud-the-crypto-worlds-hidden-enemy-opinion/" target="_blank" rel="noreferrer noopener">social engineering</a> or astroturfing, the misleading practice of disguising a coordinated online campaign as spontaneous public feedback, to win the confidence of potential victims. The project has reassured users that it found no vulnerabilities in any of the major dApps or wallets on Solana during its investigations.</p> 
<p> Read more: <a href="https://crypto.news/hacked-bitcoin-whale-may-have-lost-238m-zachxbt/"> Hacked Bitcoin whale may have lost $238m: ZachXBT </a> </p>

Solana-based Jupiter alerts of malicious Chrome extension draining wallets

Table of Contents

crypto.news

Other articles published on Aug 20, 2024

Ikigai Strategic Partners fined $150K by NFA over Bitcoin violations

Dubai Court Recognizes Cryptocurrency Salary Payments as Legally Valid

Kyrrex: Revolutionary Crypto Platform That Changes The Way Digital Assets Are Traded And Stored

General Motors in major lay-off slashing 1,000 jobs as it explores AI

Top Tap-to-Earn Games to Play in 2024

Bitcoin Rises to 61.3 Thousand Dollars

Join our free newsletter for daily crypto updates!