The Polkadot Community Foundation has issued a security alert on the Polkadot forum, warning that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code. When users unlock their wallets, their private keys may be sent to servers controlled by attackers. The malicious code was introduced on February 19, 2025, as part of a code change named “TON ecosystem,” and was intermittently active between February 2025 and October 10, 2026.
Polkadot Community Foundation Warns of Private Key Leak Risk in Fearless Wallet Browser Extension
TechFlowShare
Summary
On-chain news reveals that the Polkadot Community Foundation has issued a security breach alert regarding the Fearless Wallet browser extension. The warning states that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 may expose private keys to malicious servers during wallet unlocking. The code, added on February 19, 2025, under the name "TON ecosystem," was intermittently active until October 10, 2026.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.