Polkadot warns Fearless wallet extension leaked private keys, 17,286 DOT affected
- —Malicious code was present in Fearless extension versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5
- —Private keys could be sent to attacker servers when users unlocked the wallet
- —The code was active at various points between February 2025 and October 10, 2026
- —Eight users reported unauthorized transactions involving 17,286 DOT
Why it matters: The compromise exposes retail DOT holders and highlights the risks of third-party wallet extensions.
Source: PANews