Solana Wallet Phishing Attack Results in Significant Asset Loss

According to PANews, SlowMist recently reported on its official WeChat account that a user sought assistance after falling victim to a phishing attack. The user noticed unusual authorization records in their Solana wallet and attempted to revoke the authorization but was unsuccessful. The affected wallet address was provided for investigation. Blockchain analysis revealed that the user's account owner permissions had been transferred to an address beginning with 'GKJBEL.' As a result, the user lost assets valued at over $3 million, while an additional $2 million worth of assets remained in a DeFi protocol and could not be moved. Fortunately, with the help of the relevant DeFi platform, the $2 million in assets were successfully recovered. The victim attempted to initiate a transfer from the compromised account to their own address to verify permissions, but all transactions failed. This incident closely resembles the 'malicious multi-signature' attacks frequently seen in the TRON ecosystem. Unlike traditional 'authorization theft,' this attack involved the replacement of core owner permissions by the attacker. Consequently, the victim was unable to transfer funds, revoke authorizations, or manage DeFi assets. Although the funds were visible, they were beyond the victim's control.