Solana web3.js Library Compromised in Versions 1.95.6 and 1.95.7

The Solana web3.js library has been compromised in versions 1.95.6 and 1.95.7, posing a significant security risk by leaking private keys through a secret stealer. Users of these versions are advised to upgrade to version 1.95.8, which is unaffected. The malicious code is reported to have been injected into the library, enabling attackers to access and drain crypto wallets. Some functions, including Keypair.fromSecretKey() and Ed25519Program.createInstructionWithPrivateKey(), have been identified as affected by the compromised versions. However, certain applications, such as those developed by Squads Protocol, have confirmed they were not impacted by the security breach. The situation is still developing as further analysis of the attack is conducted.

This is an AI-generated article powered by DeepNewz, curated by The Defiant. For more information, including article sources, visit DeepNewz.