Notes

Experts find Private Keys on Slope Servers. Access to the Servers is a Mystery to them

As teams attempt to determine the reason for the theft of private keys Blockchain analysis firms that are involved in investigating the Solana attack explain the latest developments.



Blockchain auditing firms are still trying to determine how hackers gained access about 8,000 private keys that were used to drain Solana-based wallets.



Investigators are continuing to investigate after thieves took $5 million worth of Solana tokens (SOL) on Wednesday. Security firms and ecosystem participants assist in identifying the complexities of the incident.



Solana has been working closely with Phantom and Slope.Finance Two Solana-based wallet companies that had user accounts affected by the hacks. Since then, it's been revealed that some of the compromised private keys were tied to Slope.



Blockchain audit and security firm Otter Security and SlowMist supported ongoing investigations and released the findings in direct correspondence to Cointelegraph.



Robert Chen, founder of Otter Security, shared his experiences gained from first-hand access to affected resources, in collaboration with Solana and Slope. Chen confirmed that a small portion of affected wallets had private keys present on Slope's Sentry Logging servers in plaintext:



Chen also confirmed to Cointelegraph that around 5,300 private keys that were not part of the exploit were discovered in the Sentry instance. GRN ONLINE Nearly half of these addresses contain tokens. Users are advised to transfer funds in case they haven't done so already done so.



After being invited by Slope to analyze the vulnerability The SlowMist team came to the same conclusion. The team also discovered that the Sentry service of Slope Wallet collected the user's mnemonic phrase and private key and passed it on to o7e.slope.finance. SlowMist could not find any evidence to provide a reason for the credentials to be stolen.



Cointelegraph also reached out to Chainalysis and confirmed that it was performing blockchain analysis on the incident following the publication of its initial findings online. The company that analyzes blockchains noted that the exploit mainly affected users who had transferred accounts to or from Slope.Finance.



While Solana is not responsible for the exploit The incident has brought attention to the need to review the providers of wallets. SlowMist recommended that wallets be scrutinized by several security firms prior to they are released. They also advocated open source development to improve security.



Chen stated that some wallet providers had "flare under the radar" in terms of security, as compared to decentralized apps. He hopes that the incident will change the attitude of users towards the relationship between wallets, and validation by outside security partners.


Homepage: https://grnonline.info/