A recent security incident has raised concerns in the Solana community when a user lost over 3 million USD due to sophisticated phishing. The incident exposed risks in Solana’s account structure, where an attacker can change the Owner permission without initiating a fund transfer transaction, making it difficult for victims to detect. Many users mistakenly believe that ownership works the same way as on Ethereum, so they don’t realize that a single signature can alter the entire wallet’s permissions.
According to SlowMist and MistTrack, the attacker manipulated multiple layers of permissions, then cycled assets through cross-chain, CEX, and DeFi platforms, demonstrating increasingly sophisticated money laundering techniques. The victim also had 2 million USD locked in DeFi, which was successfully recovered thanks to timely reporting.
Experts recommend users carefully check URLs, transaction details, avoid suspicious links, use separate wallets for risky activities, limit granting unlimited permissions, and scrutinize every signature request.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Nasdaq-listed DeFi Development held 2.22 million SOL at the end of March, and the dfdvSOL holdings increased to over 656,000 SOL.
Gate News message, April 8, DeFi Development, the Solana treasury company listed on Nasdaq, released its latest operational report. The report shows that as of the end of March, the company held 2.22 million SOL, and its liquid staking token dfdvSOL holdings have increased from 513k to more than 656k. In addition, DeFi Development said it will continue to advance its strategic investment in the stablecoin protocol Apyx.
GateNews2h ago
Solana DEX Stabble Urges Liquidity Providers to Withdraw Funds After Identifying Former North Korean Employee
Solana-based decentralized exchange Stabble issued an emergency warning on April 7, 2026 urging liquidity providers to withdraw their funds immediately after online sleuth ZachXBT revealed that a North Korean IT worker had been employed at Elemental, a Solana DeFi infrastructure project, and that the same individual had previously worked at Stabble approximately one year ago.
CryptopulseElite2h ago
Drift Protocol announced a hacker incident recovery plan and will participate in the Solana Foundation STRIDE security mechanisms
Gate News update: On April 8, Drift Protocol posted an update on the incident response process for the hack. Drift said that it is currently actively working with asymmetric research and OtterSec to develop a coordinated and aligned recovery plan. At this stage, the primary focus is to stabilize the situation and provide protocol-level assurances for all affected users and partners. In addition, Drift will participate in a security mechanism under the Solana Foundation.
GateNews2h ago
$285M Solana Disaster – Here’s What Actually Happened
On April 1, 2026, things fell apart on Solana (SOL). Drift Protocol got hit with a $285 million exploit, and within hours, its token crashed hard. The impact didn’t stop there, it quickly spread to other connected protocols.
This breakdown is based on reporting and analysis from Coin Bureau wi
CaptainAltcoin4h ago
Solana ecosystem DEX Stabble urges LPs to withdraw funds after discovering that a former employee is a North Korean–national developer
Solana decentralized exchange Stabble issues an emergency notice urging liquidity providers to withdraw funds due to a security risk involving a former North Korean employee. The warning was disclosed by on-chain investigator ZachXBT, in the context of a U.S. warning about the infiltration of North Korean technical personnel. Stabble emphasizes that no attack has happened yet and will conduct a new security audit.
GateNews4h ago
Yesterday, the U.S. SOL spot ETF had net outflows of $15.4020 million
April 7, SOL spot ETF net outflows totaled $15.4020 million, including $13.3409 million outflows from the Bitwise Solana Staking ETF and $1.8222 million outflows from the Grayscale Solana Trust. Currently, the total net asset value of SOL spot ETFs is $776 million.
GateNews4h ago
