NEAR Wallet has the same problem as Solana’s Slope wallet
Specifically, on June 6, 2022, NEAR Wallet received a report that information about the wallet’s users had been shared externally. Accordingly, a piece of code of the NEAR wallet allowed the collection of personal data about those who tried to recover the wallet by SMS or email.
After the vulnerability was reported, NEAR Wallet quickly changed the code, deleted sensitive data that had been leaked, and identified individuals who could have access to this data as a precaution. The person who reported the vulnerability also received a commensurate bug bounty reward.