Solana has thus far confirmed that no hardware wallets have been attacked, and the issue appears to affect Slope's hot wallets. However, regardless of the sort of wallet they use, the Solana developers strongly advise that every Slope user create a new seed phrase.
Since Phantom wallets were also drained, it was initially believed that the problem was more widespread while the data breach investigation was still ongoing. But it soon became clear that the Phantom wallets being targeted weren't Phantom users after all. Austin Federa, the director of communications at Solana, acknowledged that the drained Phantom wallets had also used Slope. Later, the developers of Phantom corroborated this assertion and advised Phantom customers who had made their wallets with Slope to transfer their cash to non-Slope wallets.
As the inquiry continues, rumors also surfaced that the Solana network breach via Slope is not the result of subpar code on Slope's end either. The vulnerability allegedly happened due to Slope logging seed words on its servers.
About 9000 wallets appear to have been drained of various cryptocurrencies, with significant amounts in SOL and USDC, resulting from this cybersecurity malpractice. Post-mortems will be released by all parties involved once the precise attack tactics have been determined while the investigation is still ongoing.