SlowMist: A phishing attack on Solana led to a $3 million loss due to altered wallet owner permissions

On December 3rd, SlowMist disclosed a Solana phishing attack causing a loss of 3 million USD. A user noted unauthorized modifications in wallet permissions and couldn’t regain access. Analysis confirmed ownership privileges were hijacked.

Despite the theft, assets worth 2 million USD in decentralized finance were successfully recovered. This incident reflects tactics similar to the ‘malicious multi-signature’ attacks in the TRON ecosystem, emphasizing the evolving threats in digital assets.