Solana

Jupiter

DeFi

Meow

Jupiter’s latest report flagged a new malicious browser extension that has allegedly drained several Solana users’ wallets. After an extensive investigation, the decentralized exchange aggregator identified the extension called ‘Bull Checker’ targeting Solana-related subreddits.
Rapid action comes into play by the DEX as the reports of a small number of users using Solana DeFi got drained over the last week.
<h3 id="span-style-font-weight-400-jupiter-red-flags-bull-checker-span">Jupiter red flags ‘Bull Checker’</h3>
Pseudonymous Jupiter founder Meow mentioned in an X post that a team headed by the platform spent long hours trying to figure out the root cause of some attacks on Solana DeFi users. They found out that ‘Bull Checker’ was targeting Reddit users on Solana and other subreddits.
The <a href="https://www.jupresear.ch/t/identification-of-malicious-extension/21584" rel="noopener noreferrer nofollow" target="_blank">report</a> suggests that users with this extension were interacting with dApps normally but carried the possibility of their tokens being maliciously moved to another wallet upon transaction completion. It added that no vulnerability was found in any of the <a href="https://www.cryptopolitan.com/sonic-partners-with-neon-stack-to-bring-evm-compatible-dapps-to-solana/" rel="noopener noreferrer nofollow">dapps</a> or wallets.
It advised the users who are still using the extension or extensions with extensive permissions out of reach to be removed immediately. The investigation found that the ‘Bull Checker’ holds permission to read and change all the data on the website. This turns out to be a potential cause.
The report highlighted that Raydium has confirmed that their affected user has the same extension installed. However, the malicious browser extension was supposed to be a read-only extension that allowed users to view the holders of meme coins. It added that there should be no need for an extension like this to read or write data on all websites. Several users continued to install and use the extension.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Over the past few days, our team and mods headed by <a href="https://twitter.com/0xSoju?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@0xSoju</a> &amp; <a href="https://twitter.com/0xYankee?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@0xYankee</a> have spent endless hours trying to find out the root cause of some attacks on Solana DeFi users.
 With the help of <a href="https://twitter.com/Offside_Labs?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@offside_labs</a>, <a href="https://twitter.com/blowfishxyz?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@blowfishxyz</a> &amp; others, we have identified a malicious extension called "Bull… <a href="https://t.co/jmzOWKE7P8" rel="noopener noreferrer nofollow" target="_blank">https://t.co/jmzOWKE7P8</a> <a href="https://t.co/KKiHJhI7dx" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/KKiHJhI7dx</a>
 — meow 喵 (@weremeow) <a href="https://twitter.com/weremeow/status/1825616807002255512?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">August 19, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
<h3 id="span-style-font-weight-400-meow-issues-advisory-span">Meow issues advisory</h3>
Meow advised that one malicious extension has been identified for now, but there might still be other such extensions that can impact the users. More reports of drains have not been able to be tracked down. If a user suspects an extension has both read and change permissions, uninstall it immediately. Don’t fall for hype; just because something gets upvotes on Reddit doesn’t make it safe, it added.
This comes at a time when Solana based meme coins were having a hard time in the market. DogWifHat (WIF) price saw a decline of 37% in the last 30 days, and <a href="https://www.cryptopolitan.com/bonk-price-prediction/" rel="noopener noreferrer nofollow">BONK</a> price has dropped by around 40% in the same period.
Solana (SOL) and Jupiter (JUP) prices have also seen a plunge of 15% and 22% over the last month impacting its entire ecosystem. SOL is trading at an average price of $147.11, at press time. Its 24-hour trading volume is up by 10% to stand at $2.29 billion.

Solana DeFi users hit by malicious ‘Bull Checker’ extension

Table of Contents

Cryptopolitan_News

Other articles published on Aug 20, 2024

Authors sue Anthropic over alleged use of pirated books to train AI chatbot

The 2024 US elections: Who’s winning, and how does crypto factor in? | Opinion

Polygon’s MATIC to POL Token Migration on September 4: Everything You Need to Know

Just-In: Binance Labs Invests In Bitcoin Yield Generating Network Corn

Ethereum (ETH) Supply in Profit Drops to Lowest Since November 2023

Feeling PlayDoge and Dogwifhat’s Twists? MoonBag is Ready to Explode as the Top Crypto Presale to...

Join our free newsletter for daily crypto updates!