The attack on the wallets occurred on Tuesday evening and is still in action. Reports indicate that several Solana addresses are linked to the hack, amassing at least $5 million in SOL, SPL, and other Solana tokens from unwitting users. The reason for the attack is still not solved. Mobile wallet users suffered the most from the hack.
Somehow, the attacker managed to initiate and approve user transactions, implicating that the service of a trusted third party had been breached. The location of the attackers is still not known. Victims say that their wallets are drained without their knowledge. A representative of Phantom, the largest Solana hot wallet, announced,
"We are evaluating the incident impacting Solana wallets and are working closely with other teams in the ecosystem to get to the bottom of this. We will issue an update once we gather more information."
As a result of the attack, a long-running controversy will resurface over the security of hot wallets, which are constantly connected to the internet to give users convenient crypto transfers. On the other hand, cold wallets are not as suitable as hot wallets. One question remains, however, whether the vulnerability is exclusive to Solana Blockchain.